These Terms are published in full, openly, before any commercial conversation. A hospital's counsel, an Authorised User and a prospective buyer read the same text. Nothing in these Terms is…
Search all 478 artefacts by title, document ID or content.
The register
491 artefacts, 12,07,999 words, classified on five independent axes and versioned. 108 of them are public and open in one click; 228 sit on the critical path to cash.
Documents you cannot open yet are still listed, with the gate, the action that clears it and how long that takes. Hiding them would only make you send an email, and an email costs a day.
A further 109 artefacts are classified Internal and are not listed here. They describe how Pensieve runs itself rather than how it treats your data. The count is published because concealing it would be the same mistake in a smaller costume.
These Terms are published in full, openly, before any commercial conversation. A hospital's counsel, an Authorised User and a prospective buyer read the same text. Nothing in these Terms is…
This document is the index to Edsol Edtech Pvt. Ltd.'s internal information security policy set. It states what policies exist, who owns each one, how often each is reviewed, how exceptions…
Made under the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 and the Rules made under it. Published because it is required to be displayed, and…
A hospital moving its operation onto Pensieve is making a decade-long decision on a twelve-month contract. The reasonable fear is that the price rises once the hospital cannot leave.
If you are in the European Union or the European Economic Area, this policy does not apply to you. POL-EU-053 (Privacy Policy, GDPR Variant) does, and the two are not cumulative. The…
This is the Australian Privacy Principle 1.3 privacy policy of Edsol Edtech Pvt. Ltd., trading as Pensieve Labs. It is available free of charge and in a downloadable form at…
If you are a patient of a hospital that uses Pensieve, this policy does not govern your health records. Your hospital does.
POL-GL-134 governs the specific case of access to production data, including break-glass. This policy governs privileged rights generally: cloud administration, repository administration,…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
A hospital that has moved its entire operation onto a platform needs to know what happens when the supplier withdraws something. This Policy answers that question with notice periods, not…
This is the control a hospital should interrogate first. Everything else in the policy set assumes that Pensieve Labs personnel cannot casually reach patient data. This document states how…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
This Policy states every circumstance in which Edsol Edtech Pvt. Ltd. gives money back, what instrument it uses, how long it takes, and how a hospital claims it. It is deliberately…
Applies to all Personnel in every deployment model. Where a hospital contractually restricts support to personnel located in a named jurisdiction, that restriction is recorded on the Order…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
To keep hospital data off portable media, and to control the narrow set of circumstances in which media is unavoidable.
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Three documents cover artificial intelligence in Pensieve, and they do different jobs. Reading the wrong one produces the wrong answer.
Applies in all four deployment models. The risk profile differs sharply by model: DM-2 carries tenant-isolation risk, DM-4 carries patching and detection risk that sits with the hospital,…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Why this document is the only one in the policy set that is not public. A hardening standard states the exact configuration of the defences. Publishing it hands an attacker a map of what to…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
DIS-GL-018 is the customer-facing description of the pipeline. This policy is the binding internal rule set. Branch protection detail is POL-GL-133; release approval is POL-GL-107.
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Applies to all Personnel in every deployment model. Training for hospital staff on using Pensieve safely is a separate programme delivered under RBK-GL-016 and certified in CRT-GL-005; this…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
The honest position, first. Edsol Edtech Pvt. Ltd. is a small company. Full segregation of duties between development and operations is not achievable at this size and Pensieve Labs does…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
This Policy states how Edsol Edtech Pvt. Ltd. conducts itself online, how a reader confirms that an account or a message is genuinely from Pensieve Labs, and what Edsol Edtech Pvt. Ltd.…
There is one codebase deployed into four deployment models. This policy applies identically to DM-1 through DM-4. Escrow (Section 4.8) is the mechanism by which a hospital in any model…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
The Subprocessor Register (DIS-GL-009) is the source of truth for who the sub-processors are. It is public, dated and live; this policy does not list them and never will, because a list in…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
These Terms are the published version of the sub-processor notification and objection mechanism, so that a hospital can read them before it signs anything rather than discovering them in an…
This Code is written to be enforceable, not aspirational. Edsol Edtech Pvt. Ltd. is a small company whose largest suppliers are hyperscale cloud and software providers that will not…
This Policy states publicly how support is obtained from Pensieve Labs, who may obtain it, and how a hospital forces something upwards when it is not moving fast enough. It is written for…
This Policy states who may use the Pensieve Labs name, the Pensieve name and the associated logos, in what form, and without asking. It is written to be permissive: a hospital that has
Eight published Pensieve policies promise that something will be "counted and published in the Transparency Report". This document is where that promise is kept.
To state who may see what in the Pensieve Labs Trust Center, on what basis, for how long, and how access is granted, refused, reviewed and withdrawn.
To state what the Trust Center records about its own use, for how long, why, and who can see it.
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
These Terms govern access to and use of the Pensieve Labs Trust Center at https://trust.pensievelabs.org, the system of record for every formal, legal, contractual, security, privacy,…
This Policy applies to every deployment model (DM-1, DM-2, DM-3 and DM-4) without variation. A restriction that depended on who owned the infrastructure would not be a restriction. Where the
Vendor and sub-processor are not the same thing. A vendor is any third party Edsol Edtech Pvt. Ltd. engages. A sub-processor is a vendor that processes customer personal data, and carries…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Edsol Edtech Pvt. Ltd. operates software that hospitals run their entire operation. A defect found by a researcher and reported to us is worth more than a defect found by an attacker. This…
DIS-GL-017 is the customer-facing disclosure. POL-GL-059 is the public Vulnerability Disclosure Policy governing external researchers. This is the internal rule set, and its remediation…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
This is a notice to viewers, published on the download page and reproduced on the first page of every gated document.
These Terms govern your use of the Pensieve Labs public website at https://pensievelabs.org and any subdomain of it other than those governed by a different document. They govern a…
Edsol Edtech Pvt. Ltd. operates a vigil mechanism. It is not required to by the Companies Act, 2013; section 177(9) applies to listed companies and to certain classes of company that Edsol…