King Fahad Medical City · Riyadh Second Health Cluster

Privacy and compliance

• The current scope is training only. Do not enter patient data or health identifiers. Accounts, attendance, and answers belong to trainees, not clinical records.
• Comprehension signals are shown only in aggregate, and never attributed unless at least three participants signal in the same minute (k=3).
• Attendance is an append-only event log. Duration is computed and never stored as a fixed number.
• The correct-answer key is stored apart from the options and is never sent to the browser.
• Row-level security isolates data: each user sees only their own records or what they may manage.
• A remediation path opens on a high-confidence wrong answer, and the decision is logged with its evidence.
• Operational data currently resides in the EU (Frankfurt) and is training-only — no patient data. Moving storage into the Kingdom is an IT decision, with a timeline set by the accountable owner.
• Written decision, 17 September 2026: operational data stays in Frankfurt (EU) for this training host. No patient data. In-Kingdom residency is an IT decision with no implementation date yet.
• Localization plan: current hosting in the EU (Frankfurt) is a training environment. Moving operations into the Kingdom is an IT decision, with scope and target date set by the accountable owner — not in this interface.

An observer watches the stream and aggregates only. They do not speak, record, or see individual answers.