For medical and dental practices, MVZ and hospitals
For medical and dental practices, MVZ and hospitals
AI in healthcare for admin, quality management and correspondence
AI in healthcare for admin, quality management and correspondence
One AI workspace for the whole team, with GPT, Claude, Gemini and more. Your data is stored in Germany. No patient data at present.
30 minutes by video, free and no obligation.
Stored in Germany
No model training
Sub-processors named
ISO 27001 certified
Stored in Germany
Choose a model
Choose a model
GPT
Claude
Gemini
Mistral
Qwen · STACKIT
GPT
Claude
Gemini
Mistral
Qwen · STACKIT
Draft ready for your review
Draft ready for your review
Used by professionals bound by confidentiality, such as the patent law firm SKM-IP. We are new to healthcare.
Comparison
The paperwork
is not getting shorter
Quality manual, job ads, letters to insurers: whoever drafts them after hours on a private chatbot account uses a service the practice has no contract with. The comparison covers texts without patient data:
Comparison
The paperwork
is not getting shorter
Quality manual, job ads, letters to insurers: whoever drafts them after hours on a private chatbot account uses a service the practice has no contract with. The comparison covers texts without patient data:
Without AI
Consumer AI, private account
DeepMask
Contract partner
Sources: OpenAI, Google, Anthropic (terms of use); DPA
Not applicable
Whoever owns the account
The practice; DPA via the Trust Center
Storage location
Sources: as above; sub-processor list
Your existing systems
Set by the provider
Germany (STACKIT)
Training on inputs
Sources: OpenAI, Google, Anthropic (data controls); DPA
Not applicable
Depends on provider and account setting
Excluded by contract
Practice overview
Source: Pricing
Not applicable
None, the accounts are private
Usage overview by member and model (Pro and above)
Without AI
Consumer AI, private account
DeepMask
Contract partner
Whoever owns the account
The practice; DPA via the Trust Center
Sources: OpenAI, Google, Anthropic (terms of use); DPA
Storage location
Set by the provider
Germany (STACKIT)
Sources: as above; sub-processor list
Training on inputs
Depends on provider and account setting
Excluded by contract
Sources: OpenAI, Google, Anthropic (data controls); DPA
Practice overview
None, the accounts are private
Usage overview by member and model (Pro and above)
Source: Pricing
Everyday work
Three practice jobs
that need no patient data
Everyday work
Three practice jobs
that need no patient data
QM and organisation
Drafts of the quality manual, procedures, job ads and notices.
What changes:
You edit a draft built from your notes.
QM and organisation
Drafts of the quality manual, procedures, job ads and notices.
What changes:
You edit a draft built from your notes.
QM and organisation
Drafts of the quality manual, procedures, job ads and notices.
What changes:
You edit a draft built from your notes.
Letters to the KV, insurers and authorities
Applications, statements and queries from the practice, without details of individual patients.
What changes:
You check the draft and sign it yourself.
Letters to the KV, insurers and authorities
Applications, statements and queries from the practice, without details of individual patients.
What changes:
You check the draft and sign it yourself.
Letters to the KV, insurers and authorities
Applications, statements and queries from the practice, without details of individual patients.
What changes:
You check the draft and sign it yourself.
Guidelines and literature
Search long guidelines and journal articles, with no reference to individual patients.
What changes:
You find the right passage before reading the whole document.
Guidelines and literature
Search long guidelines and journal articles, with no reference to individual patients.
What changes:
You find the right passage before reading the whole document.
Guidelines and literature
Search long guidelines and journal articles, with no reference to individual patients.
What changes:
You find the right passage before reading the whole document.
Intended purpose and patient data
DeepMask is a general AI workspace for text and documents. It is not a medical device and is not intended for diagnosis, therapy or any other medical purpose. Results are drafts that must be reviewed by a qualified professional.
Patient data does not belong in DeepMask at present. For practices, MVZ and hospitals in statutory care, § 393 SGB V requires a C5 attestation or equivalent evidence, which DeepMask does not have.
The DPA with the medical annex and a data protection review in your organisation would also be needed.
Intended purpose and patient data
DeepMask is a general AI workspace for text and documents. It is not a medical device and is not intended for diagnosis, therapy or any other medical purpose. Results are drafts that must be reviewed by a qualified professional.
Patient data does not belong in DeepMask at present. For practices, MVZ and hospitals in statutory care, § 393 SGB V requires a C5 attestation or equivalent evidence, which DeepMask does not have.
The DPA with the medical annex and a data protection review in your organisation would also be needed.
Before the call
Before the call
What we can show you
What we can show you
The documents first
ISO documents, the DPA with the medical annex, TOMs and sub-processors, with no sign-up. We can go through them with you on the call.
Trust Center
The documents first
ISO documents, the DPA with the medical annex, TOMs and sub-processors, with no sign-up. We can go through them with you on the call.
Trust Center
A walkthrough
In the AI assessment, we show DeepMask on a practice example with made-up data.
Book the assessment
A walkthrough
In the AI assessment, we show DeepMask on a practice example with made-up data.
Book the assessment
Documents
What you or your data protection officer
can check in advance
Documents
What you or your data protection officer
can check in advance
Stored in Germany
Primarily on STACKIT (Schwarz Group). Encrypted with TLS 1.3 in transit and AES-256 at rest.
No model training
Your data never trains AI models. Contractually guaranteed.
Two levels
Level 1: Qwen on STACKIT, with no US parent company. Level 2: GPT, Claude and Gemini in EU regions of their platforms.
Sub-processors
All named publicly, with task and location. Changes are announced 30 days ahead.
Sub-processor list
§ 203 annex for medical professions
Confidentiality undertaking under § 203 StGB for medical professions, annexed to the DPA. Concluded in the Trust Center.
Text of the annex
ISO/IEC 27001
Certified to ISO/IEC 27001:2022, penetration test passed.
Stored in Germany
Primarily on STACKIT (Schwarz Group). Encrypted with TLS 1.3 in transit and AES-256 at rest.
No model training
Your data never trains AI models. Contractually guaranteed.
Two levels
Level 1: Qwen on STACKIT, with no US parent company. Level 2: GPT, Claude and Gemini in EU regions of their platforms.
Sub-processors
All named publicly, with task and location. Changes are announced 30 days ahead.
Sub-processor list
§ 203 annex for medical professions
Confidentiality undertaking under § 203 StGB for medical professions, annexed to the DPA. Concluded in the Trust Center.
Text of the annex
ISO/IEC 27001
Certified to ISO/IEC 27001:2022, penetration test passed.
The legal frame
Three rules for patient data in the cloud
The legal frame
Three rules for patient data in the cloud
§ 203 Abs. 3 and 4 StGB
Providers may be involved where this is necessary for using their services. Whoever fails to bind them to confidentiality can commit an offence.
Professional code
Doctors follow the code of their state medical chamber, based on § 9 MBO-Ä; dental practices that of the state dental chamber.
The German Medical Association and the KBV say confidentiality and data protection apply in full to AI in the practice.
§ 393 SGB V
In statutory care, a cloud service for health data needs a current C5 attestation or equivalent evidence, such as ISO/IEC 27001 with an action plan under the C5 equivalence regulation.
DeepMask currently has neither a C5 attestation nor such a plan.
General information, not legal advice. Sources: gesetze-im-internet.de, as of 22.09.2026; BÄK and KBV, Hinweise und Empfehlungen zur ärztlichen Schweigepflicht, Datenschutz und Datenverarbeitung in der Arztpraxis, as of 1 Oct 2025.
§ 203 Abs. 3 and 4 StGB
Providers may be involved where this is necessary for using their services. Whoever fails to bind them to confidentiality can commit an offence.
Professional code
Doctors follow the code of their state medical chamber, based on § 9 MBO-Ä; dental practices that of the state dental chamber.
The German Medical Association and the KBV say confidentiality and data protection apply in full to AI in the practice.
§ 393 SGB V
In statutory care, a cloud service for health data needs a current C5 attestation or equivalent evidence, such as ISO/IEC 27001 with an action plan under the C5 equivalence regulation.
DeepMask currently has neither a C5 attestation nor such a plan.
General information, not legal advice. Sources: gesetze-im-internet.de, as of 22.09.2026; BÄK and KBV, Hinweise und Empfehlungen zur ärztlichen Schweigepflicht, Datenschutz und Datenverarbeitung in der Arztpraxis, as of 1 Oct 2025.
AI in hospitals and hospital groups
Hospitals involve IT, data protection and often the works or staff council and procurement.
State hospital or church data protection law can add requirements; your organisation decides, advised by your data protection officer.
For vendor assessment we supply ISO documents, TOMs, the DPA, the sub-processor list, a DPA add-on for church-run institutions and SSO/SAML on Enterprise. Here too, for texts without patient data only.
AI in hospitals and hospital groups
Hospitals involve IT, data protection and often the works or staff council and procurement.
State hospital or church data protection law can add requirements; your organisation decides, advised by your data protection officer.
For vendor assessment we supply ISO documents, TOMs, the DPA, the sub-processor list, a DPA add-on for church-run institutions and SSO/SAML on Enterprise. Here too, for texts without patient data only.
May we enter patient data into DeepMask?
No, not at present. For practices, MVZ and hospitals that treat patients under statutory health insurance, § 393 SGB V requires a C5 attestation or equivalent evidence, which DeepMask does not have.
You would also need the DPA with the medical annex and a data protection review in your organisation.
Can DeepMask write doctors' letters?
Doctors' letters contain patient data, which does not belong in DeepMask at present. DeepMask does not transcribe consultations and is not connected to a practice management system. It helps with the texts around the practice.
Do you have customers in healthcare?
We do not yet have a reference customer in healthcare. Our named customers work in law, construction, energy and finance, so we show no anonymous quote.
Where is our data stored and processed?
Data is stored in Germany, primarily on STACKIT. Level 1 runs on STACKIT and our own infrastructure, Level 2 with GPT, Claude and Gemini in EU regions of their platforms.
Some models are only offered globally; if you expressly select one, inputs may be processed outside the EU.
Web search runs through Perplexity AI, Inc. (USA), only when you switch it on in the chat, and receives only the search query.
How does the free AI assessment work?
30 minutes by video, in German: where AI helps in your practice and where it does not, DeepMask on an example with made-up data, and the documents for your own review. No obligation.
May we enter patient data into DeepMask?
No, not at present. For practices, MVZ and hospitals that treat patients under statutory health insurance, § 393 SGB V requires a C5 attestation or equivalent evidence, which DeepMask does not have.
You would also need the DPA with the medical annex and a data protection review in your organisation.
Can DeepMask write doctors' letters?
Doctors' letters contain patient data, which does not belong in DeepMask at present. DeepMask does not transcribe consultations and is not connected to a practice management system. It helps with the texts around the practice.
Do you have customers in healthcare?
We do not yet have a reference customer in healthcare. Our named customers work in law, construction, energy and finance, so we show no anonymous quote.
Where is our data stored and processed?
Data is stored in Germany, primarily on STACKIT. Level 1 runs on STACKIT and our own infrastructure, Level 2 with GPT, Claude and Gemini in EU regions of their platforms.
Some models are only offered globally; if you expressly select one, inputs may be processed outside the EU.
Web search runs through Perplexity AI, Inc. (USA), only when you switch it on in the chat, and receives only the search query.
How does the free AI assessment work?
30 minutes by video, in German: where AI helps in your practice and where it does not, DeepMask on an example with made-up data, and the documents for your own review. No obligation.
How to start
Book the free AI assessment, or check the documents first, with your data protection officer if you like.
How to start
Book the free AI assessment, or check the documents first, with your data protection officer if you like.