Tanzania — Personal Data Protection Act, 2022

The PDPA establishes principles for lawful processing, gives data subjects rights, treats sensitive data such as health information with heightened protection, and sets obligations for data controllers and processors.

The PDPA is overseen by the Personal Data Protection Commission. Controllers and processors may be required to register with the Commission. Teliyadu's encryption, isolation and audit logging support these requirements.

• Encryption everywhere — TLS 1.2+ for data in transit and AES-256 for data at rest.
• Strict tenant isolation — each clinic's records live in their own private database schema, never in shared tables.
• Role-based access control (Admin, Dentist, Receptionist, Dental Assistant) so staff only reach the data their role needs.
• Audit logging of every access to patient records and financial data.
• Hosting on AWS in the EU (Frankfurt, eu-central-1) with automated, encrypted daily backups.
• We never use your patients' data to train third-party AI models, and we never sell it.

Your clinic is the data controller for the patient information it stores in Teliyadu OralOS — you decide why and how it is processed. Teliyadu acts as a data processor, handling that information only on your documented instructions and only to provide the service. A data processing agreement (DPA) setting out these responsibilities is available on request.

Individuals can access their data, request correction or erasure, and object to certain processing. Teliyadu OralOS provides the tools to act on these requests.

To ask a data-protection question, or to make a request on behalf of a patient, email support@teliyadu.com and we'll route it to the right person.