To state exactly what is encrypted, with what, and the question that actually decides a security review, who holds the keys and what Pensieve Labs can therefore decrypt. Vendors are usually
DIS-GL-011DisclosureGL1234PublicCritical path31 July 2026
Search all 478 artefacts by title, document ID or content.
The register
491 artefacts, 12,07,999 words, classified on five independent axes and versioned. 108 of them are public and open in one click; 228 sit on the critical path to cash.
Documents you cannot open yet are still listed, with the gate, the action that clears it and how long that takes. Hiding them would only make you send an email, and an email costs a day.
A further 109 artefacts are classified Internal and are not listed here. They describe how Pensieve runs itself rather than how it treats your data. The count is published because concealing it would be the same mistake in a smaller costume.
To state exactly what is encrypted, with what, and the question that actually decides a security review, who holds the keys and what Pensieve Labs can therefore decrypt. Vendors are usually
This Policy states the environmental position of Edsol Edtech Pvt. Ltd. (Pensieve Labs): what its environmental footprint actually is, how it is measured and where it is not, what it asks…
Your data is yours. All of it. At any time. In a form you can use. At no charge. However this ends, including if it ends because you did not pay us.
Pensieve is not sold per seat, per user or per transaction. A hospital adds departments, users and workflows without asking and without repricing (POL-GL-065). That model only works
Foundation is content, not a build variant. The same baseline instantiates into all four deployment models.
Published under section 8(9) and section 13 of the Digital Personal Data Protection Act, 2023, Rules 9 and 14(3) of the Digital Personal Data Protection Rules, 2025, and Rule 5(9) of the…
This Policy states how Edsol Edtech Pvt. Ltd. (Pensieve Labs) respects human rights in what it builds, how it operates, whom it sells, and whom it buys. It is the policy commitment required…
This document states commitments, not intentions. Each one is measurable after the fact against the incident record, and the incident record is disclosable to the affected hospital.
This document answers one question, asked in almost every UAE security review: which United Arab Emirates information security standards must our software vendor comply, and is…
This is the apex information security policy of Edsol Edtech Pvt. Ltd. Every other policy in the POL-GL-1xx series is subordinate to it. It is approved by the Founder and it is published in…
Read this before you sign, not before you go live. This document exists to prevent the most expensive surprise available in hospital software: discovering at cutover that a regulatory…
The Australian fork of DIS-GL-029 and the Australian analogue of the integration boundary published for India (DIS-GL-024). This document is the honest conformance answer. It states what is…
Applies to DM-1, DM-2, DM-3 and DM-4 identically. The same application code and the same standards support ship in all four models.
Applies to DM-1, DM-2, DM-3 and DM-4 identically. The same application code and the same standards support ship in all four models. What differs by model is where the integration endpoint…
Edsol Edtech Pvt. Ltd. is not certified to ISO/IEC 27001 and has not begun a certification audit. This statement exists so that the gap is a schedule, not a mystery.
This Policy states how Edsol Edtech Pvt. Ltd. responds when a court, a regulator, a police authority, a tax authority or any other public body demands access to data held in or through the…
This Policy states how Edsol Edtech Pvt. Ltd. (Pensieve Labs) contacts people who are not yet its customers, what it says to them, on what basis, and how they stop hearing from it. It…
Applies where the Customer is established in a Member State of the European Union or in a State party to the Agreement on the European Economic Area, or where the Processing is otherwise…
This is the standard form on which Edsol Edtech Pvt. Ltd. contracts. It is published openly, in full, before any commercial conversation, so that a hospital's counsel can read it, price the…
This is the United Arab Emirates variant of MSA-IN-001. Read MSA-IN-001 for the structure, the definitions, the deployment-model clause, the charges and payment mechanics, the customer…
Sections 2 to 5 describe what a hospital needs on its own floor in every deployment model. Sections 6 and 7 add what the hospital additionally owns in DM-3 and DM-4.
Edsol Edtech Pvt. Ltd.'s statement on modern slavery, forced labour and child labour in its own operations and in its supply chain.
A voluntary statement, made in the form required by section 16 of the Modern Slavery Act 2018 (Cth).
Edsol Edtech Pvt. Ltd. is a Micro or Small Enterprise registered under the Micro, Small and Medium Enterprises Development Act, 2006. That status changes the legal character of the payment…
This Agreement is deployment-model neutral. It governs information exchanged before any deployment model is selected and imposes no obligation that depends on where the Platform runs. No…
Written to be handed straight into a hospital's own supply-chain security file. Every row cites an artefact rather than an assurance.
Edsol Edtech Pvt. Ltd. holds no certification and no accepted self-declaration against Normen as at
Pensieve Labs is not an approved supplier in the Norwegian health network, has not signed the supplier terms, has not passed the identity-service code review, and holds no national service
This is the notice Edsol Edtech Pvt. Ltd. gives you at the point it collects your personal data, as Section 5 of the Digital Personal Data Protection Act, 2023 read with Rule 3 of the…
The statutory duties below fall on the dataansvarlig (the hospital) in every deployment model. What varies is only how much of the evidence Pensieve Labs supplies.
This document is for the person who has to decide whether Pensieve can be operated safely inside a hospital: the IT head, the group CIO, the incumbent maintenance partner, or an external…
Read this first. A security claim that is true for DM-1 can be false for DM-4. Every section of this document that is deployment-model-sensitive carries a per-model table or a variant note.…
These Terms are published in full, openly, before any commercial conversation. A hospital's counsel, an Authorised User and a prospective buyer read the same text. Nothing in these Terms is…
This document is the index to Edsol Edtech Pvt. Ltd.'s internal information security policy set. It states what policies exist, who owns each one, how often each is reviewed, how exceptions…
After a hospital leaves, Edsol Edtech Pvt. Ltd. deletes its clinical records, its patient data, its documents, its images, its configuration and its content. What survives is a short,…
Made under the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 and the Rules made under it. Published because it is required to be displayed, and…
A hospital moving its operation onto Pensieve is making a decade-long decision on a twelve-month contract. The reasonable fear is that the price rises once the hospital cannot leave.
If you are in the European Union or the European Economic Area, this policy does not apply to you. POL-EU-053 (Privacy Policy, GDPR Variant) does, and the two are not cumulative. The…
This is the Australian Privacy Principle 1.3 privacy policy of Edsol Edtech Pvt. Ltd., trading as Pensieve Labs. It is available free of charge and in a downloadable form at…
If you are a patient of a hospital that uses Pensieve, this policy does not govern your health records. Your hospital does.