Signal Labs

Security & Data Governance

Privacy is the architecture, not a policy bolt-on. Your employer never receives an individual record because the system is built so it cannot.

Effective 2026-06-13

The guarantee, in architecture

  • Results belong to each employee. Individual results go directly to the person they belong to. Your employer sees only anonymised group trends — never an individual score, never a name next to a number. Groups too small to be anonymous are suppressed entirely, and there is no path through the system that returns an individual row.
  • The model narrates, it never decides. The Physical Signal Score and the CogniScore are computed deterministically on the server. The LLM only produces plain-language narration over an already-final result; it cannot change a score, band, or trend.
  • Model keys never touch health data pods. LLM provider keys live only in the shared AI gateway. Screening services hold no model credentials and call narration through a governed dispatch boundary.

Data residency

Each organization carries a residency region (eu or uk). Employee health data and FHIR Observations are stored in-region. Residency is enforced twice: at the dispatch boundary (a non-region request is rejected and audited) and at the model gateway (an EU tenant is served only by EU-resident providers). EU employee data does not leave the EU.

Consent & device connections

Every connected device — via on-device HealthKit/Health Connect, the Terra aggregator, or direct OAuth/BLE — writes an explicit, logged consent record. Revocation deletes tokens and stops ingest end-to-end. All sources normalize to the FHIR R4 Observation model.

Compliance posture

  • GDPR Article 9 (Irish DPC lead supervisory authority); DPIA, RoPA, and a named DPO.
  • A Data Processing Agreement is in place before any health data is processed.
  • EHDS (Reg (EU) 2025/327) — EU-resident processing baseline.
  • UK GDPR + DPA 2018 with a UK representative.

Reporting a vulnerability

Please report suspected vulnerabilities to team@signallabs.ie. We acknowledge reports and coordinate disclosure.

This page describes the engineering posture; specific regulatory mappings are validated by Irish/EU and per-jurisdiction counsel before launch.