Learn how PR-TOP protects your clients' most sensitive data with industry-leading security measures.
PR-TOP supports configurable data residency to meet regional compliance requirements. You can choose to host your data in the European Union or the United States, with the guarantee that data stays within your chosen jurisdiction.
No data is transferred across borders without explicit configuration by the platform administrator.
For maximum control, PR-TOP offers a Docker-based self-hosted deployment option. You run the entire platform — application server, database, AI services, and analytics — on your own infrastructure.
Self-hosting ensures that your data never touches third-party servers. You control the hardware, the network, the backups, and the encryption keys.
PR-TOP never sells, shares, or provides client data to third parties. AI processing (transcription, summarization) uses API calls where only the minimum necessary data is sent, and no data is retained by AI providers after processing.
We do not use client data for model training, advertising, or any purpose beyond providing the requested therapeutic assistant features.
Clients own their data. They can export their diary entries and exercise responses at any time, and they can request complete data deletion. Therapists maintain ownership of their own notes and session recordings.
PR-TOP acts as a data processor, not a data controller — the therapist and client remain the decision-makers about how their data is used.