Your trust is the foundation
of our work.
Ihr Vertrauen ist die Grundlage
unserer Arbeit.
MPIRIQ uses artificial intelligence to match patients with suitable clinical trials. For this to happen responsibly, data protection is not a box-ticking exercise for us — it is the architecture our product is built on.
MPIRIQ uses artificial intelligence to match patients with suitable clinical trials. For this to happen responsibly, data protection is not a box-ticking exercise for us — it is the architecture our product is built on.
Three steps for a secure collaboration.
Drei Schritte,
für eine sichere Zusammenarbeit.
Before we talk about encryption, audits or certificates, we start with the foundation: three structural decisions we have made deliberately.
Step 1
De-identified from the start
De-identified from the start
Your identity never leaves your doctor's practice. What reaches MPIRIQ is exclusively de-identified medical data
— without name, address or date of birth.
Your identity never leaves your doctor's practice. What reaches MPIRIQ is exclusively de-identified medical data
— without name, address or date of birth.
Step 2
Independent data trustee
Independent data trustee
Through the use of an independent data trustee, the processing of your data is additionally safeguarded.
Through the use of an independent data trustee, the processing of your data is additionally safeguarded.
Step 3
Data in Germany
Data in Germany
Patient data is processed exclusively in Germany. We use certified servers within the EU. No transfer to third countries takes place.
Patient data is processed exclusively in Germany. We use certified servers within the EU. No transfer to third countries takes place.
What we see & what we don't.
Was wir sehen &
was nicht.
Concrete and verifiable: an overview of the data categories we work with, and those that never reach our systems.
Concrete and verifiable: an overview of the data categories we work with, and those that never reach our systems.
What MPIRIQ processes
Medical data on diagnoses
Medical data on diagnoses
Data on prior treatment history
Data on prior treatment history
Allgemeine medizinische Charakteristika
Allgemeine medizinische Charakteristika
What MPIRIQ never receives
Your first or last name
Your first or last name
Address or postal code
Address or postal code
Versicherungs- oder Sozialversicherungsnummer
Versicherungs- oder Sozialversicherungsnummer
Phone number, email or other contact details
Phone number, email or other contact details
A key for re-identification
A key for re-identification
On what basis do we process your data?
Auf welcher
Grundlage verarbeiten wir Ihre Daten ?
Health data is subject to special protection (Art. 9 GDPR). We base our processing on clearly defined legal grounds depending on the purpose of processing.
Health data is subject to special protection (Art. 9 GDPR). We base our processing on clearly defined legal grounds depending on the purpose of processing.
Art. 9 (2) (j) GDPR in conjunction with § 27 BDSG Scientific research
Scientific research
Matching patient data with clinical trials is a recognised scientific research purpose. The research clause permits this processing under the strict safeguards of the BDSG (German Federal Data Protection Act), which we implement without exception.
Matching patient data with clinical trials is a recognised scientific research purpose. The research clause permits this processing under the strict safeguards of the BDSG (German Federal Data Protection Act), which we implement without exception.
§ 6 Health Data Use Act (GDNG)
Secondary use of healthcare data
The GDNG permits the further processing of lawfully stored health data for the purposes of research, quality assurance and statistics. MPIRIQ acts as the data-processing institution within the meaning of the act.
The GDNG permits the further processing of lawfully stored health data for the purposes of research, quality assurance and statistics. MPIRIQ acts as the data-processing institution within the meaning of the act.
Art. 9 (2) (a) GDPR
Explicit consent
As soon as your concrete participation in an interventional clinical trial is concerned, the practice staff will reach out to you. You will be informed about the nature and scope of the trial, and your written consent will be obtained.
As soon as your concrete participation in an interventional clinical trial is concerned, the practice staff will reach out to you. You will be informed about the nature and scope of the trial, and your written consent will be obtained.
What is excluded at MPIRIQ.
Was bei MPIRIQ
ausgeschlossen ist.
What is excluded at MPIRIQ.
Data protection is shaped not only by what happens, but also by what deliberately does not happen. Three statements that clearly delineate our business model and architecture.
Data protection is shaped not only by what happens, but also by what deliberately does not happen. Three statements that clearly delineate our business model and architecture.
Advertising & marketing
Advertising, marketing or commercial profiling are not among the purposes of our processing.
Advertising, marketing or commercial profiling are not among the purposes of our processing.
AI model training
Patient data is not used for the training of external third-party AI models.
Patient data is not used for the training of external third-party AI models.
Disclosure of personal data to third parties
Disclosure of your personal data without your written consent is excluded.
Disclosure of your personal data without your written consent is excluded.
What happens behind the scenes.
Was im Hintergrund
passiert.
Beyond the architecture, concrete technical and organisational measures are in place — in line with the requirements of GDPR and BDSG.
Beyond the architecture, concrete technical and organisational measures are in place — in line with the requirements of GDPR and BDSG.
Encryption
Transmission via TLS 1.2 or higher, storage with AES-256. No unencrypted data traffic leaves our systems.
Transmission via TLS 1.2 or higher, storage with AES-256. No unencrypted data traffic leaves our systems.
Multi-factor authentication
Mandatory multi-factor authentication for all employees with data access.
Mandatory multi-factor authentication for all employees with data access.
Access control
Need-to-know principle: employees only see the data required for their specific task. Roles and permissions are reviewed regularly.
Need-to-know principle: employees only see the data required for their specific task. Roles and permissions are reviewed regularly.
Comprehensive logging
Every access to patient data and every processing operation is logged in an auditable manner and protected against manipulation.
Every access to patient data and every processing operation is logged in an auditable manner and protected against manipulation.
Contractual safeguards
With our close partners who process personal data, we conclude data processing agreements pursuant to Art. 28 GDPR.
With our close partners who process personal data, we conclude data processing agreements pursuant to Art. 28 GDPR.
Security audits
Our infrastructure and processes are regularly reviewed through internal and external audits.
Our infrastructure and processes are regularly reviewed through internal and external audits.
Incident response
In the event of an incident, a documented procedure takes effect — with clear reporting channels, a 72-hour notification obligation to supervisory authorities, and transparent information for those affected.
In the event of an incident, a documented procedure takes effect — with clear reporting channels, a 72-hour notification obligation to supervisory authorities, and transparent information for those affected.
Backup & availability
Encrypted backups, geo-redundant storage and regular restore tests ensure the availability of your data.
Encrypted backups, geo-redundant storage and regular restore tests ensure the availability of your data.
Care meets research
Your Data. Your Contribution.
More time for your patients. And a contribution to research, if you choose.
© 2026 MPIRIQ Science Technologies GmbH
Time is Health.
Care meets research
Your Data.
Your Contribution.
More time for your patients. And a contribution to research, if you choose.
Request Demo
© 2026 MPIRIQ Science Technologies GmbH
Time is Health.