Control 01
Access follows responsibility
Member information is available only to authorised people who need it for an agreed task. Family permissions and role-based access determine what each person can see.
Trust & Security
Sensitive information deserves visible governance.
Molliora coordinates information around a family; it does not own the family's health story. Our operating model is built around least-necessary access, traceability, portability and accountable human judgement.
Control 02
Activity remains visible
Access and material changes are logged so that sensitive work can be traced, reviewed and investigated. Permissions are reviewed as responsibilities change.
Control 03
Secure handling by default
Sensitive information is kept out of initial enquiry forms and ordinary messaging. Authenticated systems, encrypted transport and controlled sharing are used for substantive coordination.
Control 04
The family retains agency
Members can request access, correction, export, restriction or deletion in line with applicable law and the agreed retention schedule.
Control 05
Technology does not make clinical decisions
Software may help organise information or surface questions. A responsible person reviews outputs, and treating clinicians remain responsible for diagnosis and treatment.
Control 06
Incidents are handled directly
Suspected security or privacy incidents are assessed promptly, contained, documented and communicated to affected families and authorities where required.
Storage and residency
Disclosed, not assumed.
The applicable hosting location, service providers, retention period and authorised access model are explained during onboarding. Controls are described as they operate today; Molliora does not present a roadmap item or planned certification as a current fact.
Clinical accountability
Coordination is not treatment.
Molliora prepares, organises and coordinates. Treating physicians and institutions retain responsibility for clinical decisions. Urgent medical needs must always be directed to local emergency services or the relevant treating team.
Further detail
Read the operating detail or ask us directly.
No sensitive medical information is required to begin a membership conversation.