Trust, Data and Governance
Agents bring the speed. People keep the responsibility. Agents (AI software that takes on tasks) prepare, classify and send reminders. An expert or another authorized person makes the decision.
agent draft · example
Pre-session prep note
agentdraft prepared, awaiting review
example flow · a person decides
Human control over agent outputs
- The decision owner is clear. Agents prepare, classify and send reminders. An expert or another authorized person decides.
- Authorization follows the thesis. Healthcare, advisory services and everyday life support don't share one authorization model.
- Agents take the tasks, people make the decisions. Agents handle preparation, follow-up and continuity. The expert decides.
Traceability and accountability
Critical outputs are recorded with their source, time and review status. AgenticObjects turns agent outputs into auditable business objects.
| output | source | status |
|---|---|---|
| session summary | user form | approved by expert |
| follow-up reminder | expert plan | approved by expert |
| risk flag | user record | sent to expert |
Data processing principles
Data is limited to its purpose. For every venture, the rules for data access, retention and sharing are defined by use case.
- PURPOSE
Purpose limitation
- MINIMUM
Data minimization
- EMPLOYER
No individual data shared with employers
- MARKETING
Not used for marketing
A client organization sees only the reporting that is necessary and legally appropriate. Individual session content is not shared with the employer.
We build the authorization model around the thesis.
For every venture, we define the nature of the service, the decision owner, data responsibilities and the required permissions during validation. Eligible ventures that include healthcare can use Gurulize infrastructure registered with USBS, the Remote Health Information System of Türkiye's Ministry of Health. Depending on the service model, that can mean partnering with an authorized healthcare organization, working with an authorized healthcare professional, or setting up a support model that falls outside the scope of healthcare services. No single authorization model applies to every thesis.
- Nature of the service
- decision owner
- authorized provider
- data controller
- required permissions
- review of promotional language
Health and USBS
Ventures that include healthcare can use USBS-registered Gurulize infrastructure. The registration belongs to the infrastructure. Who provides the healthcare service, and under which authorization, is decided separately for each thesis.
The USBS registration belongs to the Gurulize infrastructure. The authority to provide healthcare services belongs to authorized healthcare facilities and healthcare professionals, as defined by the applicable regulations.
Agents can
- Gather information
- Summarize
- Send reminders
- Pass defined risk flags to the expert
Agents cannot
- Diagnose
- Start or change treatment
- Recommend medication
Additional terms for each venture
Each venture sets additional terms for its own service model: infrastructure, expert responsibility, agent boundaries, data and emergency notices. Ventures that don't provide healthcare use the relevant components of Gurulize infrastructure.
- Yuvadan
- Trust and regulation
- Fitkültür
- Trust and regulation
- Loyexo
- Venture details
- Probuddy
- Venture details
Sources
The texts on this page are reviewed against health law and KVKK (Türkiye's Personal Data Protection Law No. 6698) before publication.
- Regulation on the Provision of Remote Health Services (in Turkish) ↗Official Gazette of Türkiye · Feb 10, 2022 · No. 31746
- Active USBS List (in Turkish) ↗Ministry of Health of Türkiye
- Special Categories of Personal Data (in Turkish) ↗Turkish Personal Data Protection Authority
- KVKK Privacy Noticewitlabs.studio
- Privacy Policywitlabs.studio
- Cookie Policywitlabs.studio
Have a question?
Talk to our enterprise team about data, authorization or healthcare service models.