Printed on the legal letterhead. Page furniture, margins and repeating table headers come from the same stylesheet the PDF service uses.

Edsol Edtech Pvt. Ltd.

Pensieve Labs | Pensieve

NTC-GL-020

v1.0.0 | 31 July 2026

Trust Center Update Bulletin

NTC-GL-020 | Version 1.0.0 | Last Modified On 31 July 2026

Published monthly on a fixed day under POL-GL-502, whether or not anything changed. Eight fixed sections, including a mandatory list of documents overdue for review and a section stating what did not change.

Applicability

`DM-1`	`DM-2`	`DM-3`	`DM-4`
Yes	Yes	Yes	Yes

Standing rules for this notice

The hospital is the Data Fiduciary. Pensieve Labs is a Data Processor and does not decide what is disclosed, corrected or erased. It notifies, it assists, and it acts on instruction.
Notify before disclosing, unless notification is prohibited by law or by an order of a court or competent authority, POL-GL-067.
Acknowledge without conceding. An acknowledgement confirms receipt. It never confirms that a person is a patient, that records exist, or what they contain.
Publish on the stated cadence even when there is nothing to report, and say so plainly.

The notice


Cadence	Monthly, published whether or not anything material changed. A month with nothing to report says so.
Purpose	To make the Trust Center's currency visible. A trust center full of documents nobody can date is worse than no trust center
Audience	Public. Also sent to every active Trust Center credential holder and to Customers' notified contacts
Never	The first notice of a Critical or High security bulletin (`NTC-GL-021` Section 10), of an incident (`NTC-GL-002`), or of a sub-processor change (`NTC-GL-001`). Those are direct notices, and the digest only repeats them

Subject: Pensieve Labs Trust Center, Bulletin tc period: Bulletin tc headline

Period covered: Bulletin tc period start to Bulletin tc period end | Published: Bulletin tc published on | Bulletin: Bulletin tc ID

1. Documents published or revised

Document	Version	Change	Tier
`{{bulletin.tc.docs[].id}}`	`{{bulletin.tc.docs[].version}}`	`{{bulletin.tc.docs[].summary}}`	`{{bulletin.tc.docs[].tier}}`

2. Security bulletins

Bulletin	Severity	Summary	Customer action
`{{bulletin.tc.security[].id}}`	`{{bulletin.tc.security[].severity}}`	`{{bulletin.tc.security[].summary}}`	`{{bulletin.tc.security[].action}}`

Bulletin tc security none statement (where there were none: "No security bulletins were published in this period." Never omit the section.)

3. Sub-processor changes

Log ID	Change	Sub-processor	Effective	Objection deadline
`{{bulletin.tc.subprocessors[].log_id}}`	`{{bulletin.tc.subprocessors[].change}}`	`{{bulletin.tc.subprocessors[].name}}`	`{{bulletin.tc.subprocessors[].effective}}`	`{{bulletin.tc.subprocessors[].objection_deadline}}`

4. Assurance and evidence

Bulletin tc assurance: new or refreshed assessments, test reports, questionnaire responses, insurance, and escrow. Where an assessment has expired and has not been renewed, this section says so.

5. Availability

Metric	This period	Trailing 12 months
Platform availability against the target in `SLA-GL-001`	`Bulletin tc availability period`	`Bulletin tc availability ttm`
Severity 1 incidents	`Bulletin tc sev1 count`	`Bulletin tc sev1 count ttm`
Emergency Maintenance events	`Bulletin tc emergency maint count`	`Bulletin tc emergency maint count ttm`

6. Documents overdue for review

Document	Review was due	Days overdue	Owner	New date
`{{bulletin.tc.stale[].id}}`	`{{bulletin.tc.stale[].review_due_on}}`	`{{bulletin.tc.stale[].days_overdue}}`	`{{bulletin.tc.stale[].owner}}`	`{{bulletin.tc.stale[].new_date}}`

This section is published, not suppressed. POL-GL-502 requires a document past its review date to show its true age rather than hide it, and requires the overdue list to appear here.

7. Regulatory and legal changes affecting hospitals

Bulletin tc regulatory: commencement dates, new rules, and what Pensieve Labs is doing about them. Facts and dates only; no legal advice is given and none should be inferred.

8. What did not change

Bulletin tc no change statement

Contact. info@pensievelabs.org | Archive: https://trust.pensievelabs.org/updates

Drafting notes. Publish on a fixed day each month so its absence is noticeable. Never skip a section: an empty section with "nothing this period" is information, and a missing section is an unanswered question. Section 6 is the section that makes the rest believable, and the temptation to drop it will arrive in the first month it is not empty.

Topic	Document
Government and law enforcement demands	`POL-GL-067`
Grievance handling and statutory clocks	`POL-GL-066`
Assistance with Data Principal rights	`DPA-GL-001` clause 9
Privacy Policy and Grievance Officer notice	`POL-GL-053`
Security bulletins	`NTC-GL-021`
Document review and staleness	`POL-GL-502`
Availability measurement	`SLA-GL-001` clause 5, `DIS-GL-030`

Change history

Version	Date	Author	Summary
1.0.0	`31 July 2026`	`Pensieve Labs` Legal	First publication. Split from the grouped request and bulletin notices file into a separately addressable instrument. Eight fixed sections, the mandatory overdue-review section and the publish-even-when-empty rule.

Edsol Edtech Pvt. Ltd. | CIN [TO BE SUPPLIED] | 28, Jamunather, Bulandshahar, Uttar Pradesh, India

NTC-GL-020 v1.0.0 | Last Modified On: 31 July 2026

Document integrity: SHA-256 462C2686014C | Verify at https://trust.pensievelabs.org/verify/462C2686014C

#Trust Center Update Bulletin

#Applicability

#Standing rules for this notice

#The notice

#1. Documents published or revised

#2. Security bulletins

#3. Sub-processor changes

#4. Assurance and evidence

#5. Availability

#6. Documents overdue for review

#7. Regulatory and legal changes affecting hospitals

#8. What did not change

#Related documents

#Change history