Security and Privacy - GDPR Compliant Health Data Protection

As a dietitian, you manage your clients' health data, personal information, and measurement records. The security of this data is both a legal obligation and a professional responsibility. Nebula protects your data with enterprise-grade security measures.

Under the GDPR (General Data Protection Regulation) in Europe, health data is classified as special category personal data requiring enhanced protection. Nebula is fully compliant with GDPR requirements.

All data communication in Nebula is protected with SSL/TLS encryption. This means all data between your browser and our servers is transmitted encrypted.

• SSL/TLS encryption: All data transfers occur over HTTPS
• 3D Secure payment: Credit card information is processed through a secure payment infrastructure
• Secure session management: JWT token-based authentication

Nebula runs on Amazon Web Services (AWS) infrastructure. AWS is one of the most trusted cloud providers worldwide and holds healthcare industry compliance certifications.

• Regular backups: Your data is automatically backed up
• 99.9% uptime guarantee: High availability
• Geographic redundancy: Data is backed up in different regions

Nebula supports the following rights under data protection regulations:

• Right to information: Your clients can learn what data is being processed
• Data portability: Data can be exported
• Right to erasure (right to be forgotten): Data deletion requests can be processed through the GDPR verification process
• Restriction of processing: Right to restrict the processing of certain data

Through Nebula's GDPR verification page (hellonebula.net/gdpr-verify), clients can request data deletion or export.

Nebula uses a separate database schema for each business (tenant). This "tenant-per-schema" architecture makes it technically impossible for one business's data to be accessed by another.

This approach provides enterprise-grade data isolation and keeps your data security at the highest level.