Privacy policy
Effective date: 18 October 2026
Last updated: 18 October 2026
Avodeck helps expert witnesses review medical records. This policy explains what personal data we hold, why, where it is kept, and the choices you have. We have tried to keep it in plain English.
1. Who we are
Avodeck is made by Four Integers Ltd ("we", "us", "our"), a company registered in England and Wales.
- Address: 82a James Carter Road, Mildenhall, IP28 7DE, England, UK
- Email: hello@fourintegers.com
2. Our role: controller and processor
We hold two different kinds of personal data, and our role is different for each.
- Your account and this website. For your name, email address, sign-in details, billing records and pilot sign-ups, we are the controller. We decide how this data is used, and this policy applies in full.
- The records in your cases. When you upload a bundle of medical records, you (the expert) are the controller and we are your processor. We only handle those records to provide Avodeck to you, on your instructions and under a data processing agreement. We never use them for anything else.
3. Data we collect
3.1 When you join the pilot
- Your name and email address
- Roughly how many cases you take on a year, if you tell us
3.2 Your account
- Name, email address and professional details you add to your profile
- Sign-in and security information, including your two-step sign-in settings
- Billing and invoice records
3.3 Your cases
- The medical records you upload, and the text we read from them
- The facts Avodeck finds, and which ones you have checked
- Your notes, your report, your dictation and your signature
- A record of who did what in each case, which is needed for court
3.4 Technical data
- IP address, browser and device type
- Access and security logs. These never contain the text of medical records.
4. How we use it, and our legal bases
- To provide Avodeck (contract): running your account, reading and numbering your records, and producing your report.
- To keep Avodeck secure (legitimate interests): spotting unusual sign-ins, preventing misuse, and fixing faults.
- To meet legal duties (legal obligation): keeping invoices and tax records.
- To tell you about the pilot (consent): you can ask us to stop at any time.
Medical records are special category health data. We process them only on your instructions as your processor. As controller, you are responsible for having a lawful basis to share them with us, for example your instruction in legal proceedings.
5. How Avodeck uses AI
- AI finds and links facts. It never writes your opinion. Every suggestion points to the exact words on a numbered page, and you check each one.
- Names and identifying numbers are removed from the text before it is sent to an AI model.
- No training on your data. Our AI providers do not use your records to train their models, and do not keep them after answering.
- AI runs in the UK. We only use AI services hosted in UK data centres.
6. Who processes data for us
We use a small number of carefully chosen providers. Each is bound by a contract that protects your data.
| Provider | What for | Data | Where |
|---|---|---|---|
| Supabase | Database, sign-in and file storage | Account and case data | London, UK |
| DigitalOcean | Running the Avodeck service | Account and case data | London, UK |
| Amazon Web Services (Bedrock) | AI that finds facts in the records | Record text with identifiers removed | London, UK |
| Microsoft Azure | Reading scanned pages and dictation | Page images and audio | UK South |
| Resend | Sending emails | Your email address. Emails never contain patient details. | See provider |
| Stripe | Payments | Billing details | See provider |
| Sentry | Error reports | Technical data, with personal details removed | EU |
| Vercel | Hosting this website | Technical data | See provider |
7. Where your data is kept
The medical records in your cases are stored and processed in the UK, and never leave it. Some account and technical data may be handled by providers outside the UK, such as for email, payments and website hosting. Where that happens, the transfer is protected by the UK International Data Transfer Agreement or an equivalent safeguard.
8. How we keep it safe
- Encryption in transit and at rest
- Two-step sign-in for every account, and a fresh check before signing, sending, exporting or deleting
- Each case is visible only to the expert and the people they add
- Patient details are kept out of our logs and error reports
- Regular security testing and a written plan for incidents
9. How long we keep it
| Data | How long | Why |
|---|---|---|
| Case records and reports | As long as you set for each case. When you close a case and the time is up, it is deleted and you get a certificate of deletion. | Your professional and court duties |
| Account data | While your account is open, then deleted when you close it | Providing the service |
| Billing records | 6 years from the date of the invoice | Tax law |
| Pilot sign-ups | Until the pilot ends, or sooner if you ask | Contacting you about the pilot |
| Technical data | Only as long as needed for security | Security and fault-finding |
10. Your rights
You have the right to:
- See a copy of the data we hold about you
- Have it corrected if it is wrong
- Have it deleted
- Take it with you in a common format
- Object to, or limit, how we use it
- Withdraw your consent at any time
- Complain to the Information Commissioner's Office (ico.org.uk)
If you are a patient whose records appear in a case, please contact the expert or the party who instructed them, as they are the controller. If you contact us, we will pass your request to them.
To use any of these rights, email hello@fourintegers.com. We will reply within one month.
12. If something goes wrong
If a breach affects your personal data, we will tell you without undue delay and, where required, tell the Information Commissioner's Office within 72 hours. For case records, we will tell you, as the controller, straight away so you can meet your own duties.
13. Changes to this policy
We may update this policy from time to time. If we make an important change, we will tell you by email or in Avodeck before it takes effect. The date at the top shows when it last changed.
14. Contact us
For any question about privacy, email hello@fourintegers.com or write to Four Integers Ltd, 82a James Carter Road, Mildenhall, IP28 7DE, England, UK.