New: What did the April 2, 2026 OHS training regulation change for hospitals? Read the guide →+90 850 840 02 99WhatsApp[email protected]
ATP MedAI
Security and privacy

Training data secure, patient data stays out

ATP MedAI was designed to manage staff training and doesn't need patient data. Each hospital is kept in its own space; data travels over encrypted connections.

Principles

Security fundamentals

Minimal data, separate spaces, logged access.

Hosting and data location

The platform is hosted in data centers in the European Union; in the Enterprise plan, it can be installed on your hospital's own servers.

A separate space per hospital

Tenant structure: each hospital's data in its own space; in a group, leadership sees every hospital within their permissions.

Role-based access

Only authorized people see individual results; the management dashboard shows department-level summaries.

Audit trail

Access and important actions are logged.

E-signed certificates

Attendance certificates are signed with an e-signature and archived electronically.

Protected video

Video content is delivered through time-limited, signed links.

Data flow

Only what's needed reaches the platform

Staff, role and department information is enough to manage training.

HIS / HR

Only staff, role and department information is transferred.

ATP MedAI platform

Training plan, exam and certificate data is processed in the hospital's own space.

Dashboard and reports

Authorized users see the department summary and the individual results they are permitted to see.

What never reaches the platform:Patient identityDiagnosis and treatment informationPatient records and images
AI and data

Where do the language models run?

The language models run on our own servers, with no data sent to an external AI service. In the Enterprise plan, the models can also run on your hospital's own servers.

  • Case simulation with synthetic case cards
  • Protocol assistant uses only documents your hospital uploads
  • AI content doesn't go live without expert approval
  • If the model can't produce a result, the system falls back to rule-based suggestions
Request a demo
Model and data locationSample setup
Language modelOur own serversDefault
Language modelHospital's own serverEnterprise
Source documentsIn the hospital's spacePer tenant
Case cardsSyntheticNo patient data

Sample screen · illustrative data

KVKK (Turkish data protection law)

The platform works with the minimum data needed to manage staff training: name, role, department, and training, exam and certificate records. Your hospital is the data controller for these records; ATP Eğitim Teknolojileri provides the service in line with your hospital's instructions.

KVKK awareness training is in the catalog. Regular training for employees who process health data is among the measures the Personal Data Protection Board sets for special-category data.

  • No patient data processed
  • Each hospital in its own space
  • Role-based access and audit trail
  • Individual results visible only to authorized users

Website privacy notice (KVKK)

FAQ

Security questions

Data, access and server location.

Have a question?

Write to our team with questions specific to your organization.

Contact us

Is patient data required?

No. Only staff, role and department information is taken from the HIS (hospital information system). Case simulation works with synthetic cases.

Where is data stored?

The platform is hosted in data centers in the European Union, and data travels over encrypted connections. Each hospital is kept in a separate space (tenant); in the Enterprise plan, the platform can be installed on your hospital's own servers.

Who can see individual exam results?

Only the people you authorize. The management dashboard shows department-level summaries; access is logged.

Can group leadership see every hospital in the group?

Yes. Each hospital is kept in its own space; group leadership sees a summary of all hospitals within their permissions.

Where do the language models run?

The language models run on our own servers, with no data sent to an external AI service. In the Enterprise plan, the models can also run on your hospital's own servers.

All questions (26)

Demo

See training and compliance on one platform

A live walkthrough with screens suited to your type of facility; the quote is based on your headcount.

Set up by our team · No patient data needed · Each hospital in its own space