Updates
Updates
Material changes to our security and privacy posture, in chronological order.
-
Data Retention & Erasure document published
New legal document: Data Retention & Erasure. It sets out in plain language how long each data category is kept (fiscal records 7 years, veterinary-medicine dispensing records 5 years, employee records 2 and 5–7 years after departure, operational logs around 2 years, medical dossiers as lifelong patient history under the clinic's control), what erasure on request actually does (immediate deletion of everything without a statutory retention duty, minimisation of what must stay, automatic anonymisation once the legal term expires) and how clinics and pet owners can export their data. The FAQ answer on retention has been aligned with it.
-
Trust center launched
trust.zoravet.com is live: legal documents, sub-processors, FAQ and this update log, now the central place for security and privacy information. As the security posture stands at launch: a documented restore rehearsal has been executed against production (schema and row-count checks passed) and repeats periodically; backups are replicated to a second EU region for regional-failure cover; and continuous infrastructure monitoring and alerting is active, with deeper application-level observability built and ready for activation at go-live.