Governance and data handling

Public website data processing

A clear boundary between this informational website, the pilot contact process and an authorised Kiaro review environment.

Last updated: 13 July 2026

This page describes the intended processing boundary for the public website. It is not a data-processing agreement for a Kiaro pilot or customer service.

No live regulated review on this website

The public website does not provide a document-upload facility and is not connected to a live pharmaceutical review workflow. Product panels and report metrics shown on the site are illustrative and contain no customer documents or private review data.

Pilot enquiry information

The contact form is limited to ordinary business contact details and high-level information about the workflow an organisation would like to discuss. Submissions are validated by Kiaro’s server and delivered to a private business inbox through an approved transactional email provider. The destination and delivery credentials remain in private server configuration rather than public website files.

Do not include patient information, adverse-event reports, confidential source packs, promotional materials, account credentials or private review findings.

Cookies, analytics and hosting

No advertising cookies, behavioural tracking tools or third-party analytics are included in the default site build. A production hosting provider may process standard security and delivery logs. Any future analytics or consent-management tooling should be assessed and documented before deployment.

Pilot and customer environments

Before regulated or confidential materials are processed in a Kiaro pilot, the parties should agree the authorised purpose, data roles, approved users, security controls, hosting location, subprocessors, retention and deletion arrangements, incident handling and any required data-processing terms.

Website marketing consent does not authorise Kiaro to process review documents or patient data.

Data minimisation and access

  • Collect only the information needed to respond to the business enquiry.
  • Limit access to authorised personnel and approved service providers.
  • Use encrypted HTTPS transport for the production domain and the pilot-request endpoint.
  • Apply documented retention and deletion controls to the connected contact process.
  • Keep the public website separate from confidential review stores and credentials.

Further information

For personal-information rights and general privacy details, read the Privacy Policy. Pilot-specific processing information should be supplied during scoping and contracting.

Discuss governance requirements

Use the Kiaro contact form to request a pilot conversation without attaching or pasting confidential material.