Rwanda — Law N° 058/2021

Law N° 058/2021 sets out principles for lawful and transparent processing, grants data subjects rights, gives special protection to sensitive data such as health information, and requires controllers and processors to secure the data they hold and to observe rules on cross-border transfers.

Data protection in Rwanda is supervised by the National Cyber Security Authority (NCSA). Controllers and processors may be required to register and to appoint a data-protection officer. Teliyadu's safeguards and records support these obligations.

• Encryption everywhere — TLS 1.2+ for data in transit and AES-256 for data at rest.
• Strict tenant isolation — each clinic's records live in their own private database schema, never in shared tables.
• Role-based access control (Admin, Dentist, Receptionist, Dental Assistant) so staff only reach the data their role needs.
• Audit logging of every access to patient records and financial data.
• Hosting on AWS in the EU (Frankfurt, eu-central-1) with automated, encrypted daily backups.
• We never use your patients' data to train third-party AI models, and we never sell it.

Your clinic is the data controller for the patient information it stores in Teliyadu OralOS — you decide why and how it is processed. Teliyadu acts as a data processor, handling that information only on your documented instructions and only to provide the service. A data processing agreement (DPA) setting out these responsibilities is available on request.

Individuals have rights to be informed, to access their data, to correction and erasure, and to object to processing. Teliyadu OralOS helps your clinic respond.

To ask a data-protection question, or to make a request on behalf of a patient, email support@teliyadu.com and we'll route it to the right person.