Light checks
Internal data, internal users only. No patient or trial data.
Signs off
The app owner
Every app your clinical, R&D and operations teams build with AI, and the patient data it touches
Clinical, research and operations teams build applications with AI. NEKOD lists them, shows which ones handle patient or trial data, and sends the ones that matter for approval.
Backed and supported by
Rijksoverheid
Let your teams build, with approval you can show
Business teams keep their speed. You get one view, a clear approver for each application and a record of every decision.
- A list of every application your teams built, who owns it and what data it touches
- Patient and trial data handled the way your policy says
- Your CISO, privacy or quality lead approves only the applications that matter
- Tools connected to clinical or manufacturing systems get a closer look
Reports use your terms: Patient data, GDPR, GxP, Clinical systems, ISO 27001, Quality management, NIS2. NEKOD checks applications against your own policy and does not certify against any framework.
Tiers follow data sensitivity and clinical reach
Tiers follow data sensitivity and whether the application touches clinical or manufacturing systems. Your policy decides the checks.
Standard checks
Personal, patient or confidential data, or external users.
Signs off
A security or privacy review
Full checks and a person
Patient-facing decisions, trial data, or connected to clinical or manufacturing systems.
Signs off
The CISO, privacy or quality lead
Signs off
The app owner
Signs off
A security or privacy review
Signs off
The CISO, privacy or quality lead
Rules your policy can set
Rules a healthcare or pharma policy usually adds. Your policy decides which apply.
- An owner and a data classification for every application
- Handling of patient and trial data the way your policy sets
- Change control on tools connected to clinical or manufacturing systems
- A record of who approved each application that handles sensitive data