How NouxAI meets healthcare data regulations across every region we operate in
NouxAI complies with the DPDP Act 2023, India's comprehensive data protection legislation. We implement all required safeguards for processing personal data of Indian data principals.
We comply with the IT Act 2000 and its associated rules, including the Reasonable Security Practices and Procedures rules for handling sensitive personal data.
All Indian tenant data is processed and stored exclusively within the Mumbai region.
NouxAI complies with the Privacy Act 1988 and all 13 Australian Privacy Principles (APPs), governing how we collect, use, store, and disclose personal information for Australian healthcare tenants.
We maintain controls aligned with the My Health Records Act to ensure proper handling of health information that may be processed through our receptionist service.
We maintain an incident response plan that complies with the NDB scheme. In the event of an eligible data breach, we will notify affected individuals and the OAIC within the required timeframe.
All Australian tenant data is processed and stored exclusively within the Sydney region.
NouxAI complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) for all Canadian healthcare tenants, including the 10 fair information principles.
We support compliance with provincial legislation including PHIPA (Ontario), HIA (Alberta), and other provincial health information acts that govern how healthcare providers handle patient data.
All Canadian tenant data is processed and stored exclusively within the Montreal region.
Regardless of region, all NouxAI deployments adhere to the following security standards:
All data at rest is encrypted using AES-256 via AWS KMS with tenant-specific encryption keys.
All data in transit is protected by TLS 1.3. Voice calls use encrypted WebRTC (SRTP) and SIP-TLS.
Our infrastructure and processes are designed to meet SOC 2 Type II requirements for security, availability, and confidentiality.
We conduct regular security assessments including vulnerability scanning, penetration testing, and infrastructure reviews.