Purpose
This Clinical Data Processing Agreement forms part of the Terms and Conditions governing use of SiriON and applies to all Users who create, upload, access, store, process, synchronize, manage, export, or otherwise handle patient-related information through the SiriON platform.
Definitions
This section defines Practitioner, Clinical Data, Patient Information, and Platform for the purposes of the Agreement.
Nature of Services
SiriON provides clinical organization tools, appointment management systems, clinical documentation tools, image management systems, synchronization services, academic logbook generation tools, analytics, and reporting functions. SiriON functions solely as a digital organizational and documentation platform.
No Doctor-Patient Relationship
SiriON does not diagnose disease, recommend treatment, provide clinical opinions, provide medical advice, provide dental advice, or supervise patient care. Use of SiriON does not establish a doctor-patient relationship between SiriON and any patient.
Ownership
Ownership of all patient records and clinical information remains exclusively with the Practitioner, healthcare institution, clinic, or lawful owner under applicable law. SiriON receives only the limited rights necessary to store, synchronize, backup, display, organize, and generate reports and logbooks.
Practitioner Responsibility
The Practitioner remains solely responsible for determining what information is collected, why it is collected, what information is uploaded, how information is used clinically, whether information is disclosed, and whether information is retained.
Consent
Before uploading any patient-related information, the Practitioner shall ensure that all required patient authorizations, institutional permissions, hospital approvals, departmental approvals, and ethical approvals have been obtained where required. SiriON does not independently verify the validity of patient consent.
Photography
The Practitioner remains solely responsible for obtaining all permissions required before capturing photographs, videos, radiographs, CBCT scans, uploading patient media, exporting patient media, or publishing patient media. The Practitioner shall comply with institutional photography policies, professional ethics requirements, applicable privacy obligations, and the SiriON Patient Photography Compliance Policy.
Minimization
The Practitioner agrees to collect and upload only the minimum information reasonably necessary for clinical documentation, academic requirements, appointment management, and healthcare administration.
Prohibited Data
Unless specifically required by law and appropriately protected, the Practitioner shall not upload Aadhaar numbers, PAN numbers, passport copies, voter identification cards, banking credentials, financial account information, passwords, authentication credentials, or non-clinical biometric identifiers.
Children's Data
Where pediatric patient information is documented, the Practitioner remains solely responsible for ensuring compliance with applicable law, institutional requirements, ethical obligations, and professional standards.
Security
The Practitioner shall implement reasonable safeguards including strong passwords, device-level security, screen locking, access restrictions, protection against unauthorized access, and secure handling of exported files. SiriON shall implement reasonable security safeguards including encryption in transit, encryption at rest, access controls, audit logging, backup systems, monitoring systems, and incident response procedures.
Incident Cooperation
The Practitioner shall promptly notify SiriON of unauthorized access, security incidents, suspected breaches, credential compromise, or misuse of patient information. SiriON may investigate incidents and preserve relevant logs where reasonably necessary.
Retention
Clinical information shall be retained in accordance with SiriON's retention policies and applicable legal requirements. Certain records may continue to be retained after account deletion where required for security, audit, fraud prevention, regulatory compliance, or legal obligations.
Academic Use
SiriON may generate academic reports and logbooks using information entered by the Practitioner, but the Practitioner remains solely responsible for verifying procedure counts, case records, faculty approvals, signatures, and academic submissions.
Indemnification
The Practitioner agrees to indemnify and hold harmless SiriON and related parties from claims arising from failure to obtain required consent, privacy violations, institutional policy violations, academic misconduct, unauthorized photography, unlawful disclosure of patient information, or breach of this Agreement.
Governing Law
This Agreement shall be governed by and construed in accordance with the laws of India.
Dispute Resolution
The Parties shall first attempt to resolve disputes through good-faith discussions. If unresolved, disputes shall be referred to arbitration under the Arbitration and Conciliation Act, 1996. The seat and venue of arbitration shall be Hyderabad, Telangana, India, and proceedings shall be conducted in English.
Relationship With Other Documents
This Agreement shall be read together with the SiriON Privacy Policy, Terms and Conditions, Data Collection Notice, Patient Photography Compliance Policy, and Academic Logbook Accuracy Disclaimer. In the event of inconsistency, the document providing greater protection to patient information shall prevail.
Acceptance
By selecting "I Agree" and using SiriON's clinical documentation features, the Practitioner acknowledges that they have read, understood, and agree to be bound by this Clinical Data Processing Agreement.