Pensieve Labs

Search the register

Search all 478 artefacts by title, document ID or content.

Unlock NDA tier

Jurisdiction | NO

Norway

All markets
Normen, Norsk Helsenett and HelseID, Pasientjournalloven, NIS2, and EHF invoicing over Peppol.

What the review turns on

Regulatory themes in this market

Normen
The Norwegian health sector's information security and privacy norm. Pensieve publishes a supplier conformance statement against it.
Norsk Helsenett
The national health network. Supplier status and what connection would actually require are published, including where it does not exist yet.
HelseID
Federated clinician identity. Integration status is stated as status, not as a roadmap promise.
Pasientjournalloven
The Norwegian health record statute layer, which sits on top of the GDPR and adds obligations the GDPR does not.
NIS2
The supply-chain security obligations an essential entity passes to its suppliers. Pensieve publishes a supplier statement rather than answering the same annexe forty times.
EHF
Invoices must arrive as EHF over Peppol, or the hospital's accounts payable system will not accept them. This is a cash-clock item, not a formatting preference.

Bound values

What Pensieve’s paper resolves to in Norway

These are not descriptions of the contract. They are the values the contract binds to when it is rendered for this market, taken from the same token registry the documents themselves read from, so a clause and this table cannot disagree.

FieldValueWhy it matters
Governing lawthe laws of NorwayThe law the master agreement is construed under.
CourtsOslo District CourtWhere a matter goes if arbitration is not used or is set aside.
Arbitration seatOslo, NorwayThe legal seat, which fixes the supervisory court.
Arbitration rulesthe Norwegian Arbitration ActThe procedural rules the reference runs under.
Data protection lawthe GDPR as implemented by the Norwegian Personal Data ActThe statute the processing agreement is written against.
RegulatorDatatilsynetWho the hospital, as controller or fiduciary, reports to.
Breach notification72 hoursThe controller's statutory clock. Pensieve notifies the hospital inside 4 hours of its own awareness, in every market.
CurrencyNOKThe currency the order form and every invoice are denominated in.
TaxMVAThe indirect tax that appears on the invoice.
Standard rate25%Applied unless an exemption or reverse charge is evidenced.
Invoice formatEHF via PeppolThe format the hospital's accounts payable system will accept.
Document languagenb-NOThe language documents are issued in for this market.
Stamp dutyNot applicableWhether execution attracts duty, which, where it does, sits directly on the critical path to cash.

3 artefacts | jurisdiction NO

Written for Norway, not translated into it

5 further artefacts are internal to Pensieve and not listed. The count is published rather than the existence concealed.

Open these in the register, with facets

8 artefacts | EU / EEA

The EU/EEA set also applies here

Norway sits inside the EU/EEA regime, so the GDPR variants govern alongside the national layer above. Where the two differ on a Norway question, the Norway document governs and says so on its face.

74 artefacts | jurisdiction GL

The global set, which applies in Norway too

Most of the register carries no jurisdiction because it carries all of them: how the platform is built, how it is defended, how data leaves at the end. Every market page sits on top of these. The eight below are the ones a hospital’s reviewers open first.

Open the whole global setWhat Pensieve holds, and what it does notWhich deployment model suits this market