Records of Processing Activities (RoPA)

Maintained under GDPR Art. 30(2) by the processor — Edition: 2026-05-26

Processor

Project Line (קו פרויקטים), business No. 310333984 (D-U-N-S 532247086), Keren ha-Yesod 23/9, Ashdod 7740412, South District, Israel. Data Protection Officer / contact: support@projectlineil.com.

Controllers

Each clinic that signs the Data Processing Agreement (DPA) is an independent controller. The list of controllers and their contact details is maintained in Project Line's internal CRM and is available on supervisory-authority request.

Processing operations

#	Operation	Categories of data	Categories of recipients	Retention	Transfer outside EU / UK
1	Clinic onboarding	Clinic name, owner identity, billing address	Azure (hosting), payment/invoicing sub-processors (see Sub-processors page)	Contract + 7 yrs	Azure Israel Central — adequate
2	Patient record storage	Name, DOB, contact, medical record, prescriptions	Azure (storage), payment/invoicing sub-processors (see Sub-processors page)	UK statutory retention (NHS Records Management Code 2023): adult records 8 yrs after last treatment; children to age 25/26; up to 30 yrs for specific record types — measured from last clinical activity, then securely purged	Azure region per clinic
3	AI voice receptionist	Caller phone, call intent, appointment details (no audio or transcript stored)	OpenAI (transient), Twilio (call route)	Call metadata only (number, time, duration); audio and transcript NOT stored	OpenAI: SCC + UK Addendum (ICO) + zero-retention API; Twilio: US-EU SCCs + UK Addendum
4	Outbound reminders (SMS / WhatsApp)	Phone, name, appointment time	Twilio (SMS), Meta (WhatsApp Cloud API)	Sent log: 1 year	Meta: SCCs + UK Addendum; Twilio: SCCs + UK Addendum
5	Card-on-file auto-charge	Tokenised payment method (pm_...), not PAN	Stripe (card-on-file is Stripe-only)	Per Stripe DPA; deleted on clinic detach	Stripe: SCCs + UK Addendum + DPF (UK Extension)
6	Audit logging	Action + tenant id + timestamp	Azure SQL (in-tenant)	6 years	Same region as clinic
7	Backup / disaster recovery	Encrypted DB snapshot	Azure Backup (in-region)	7-day rolling PITR	Same region

Security measures

TLS 1.2+ all transport; AES-256 at rest (Azure SQL TDE + Azure Storage SSE)
Per-tenant authorisation scope (cross-clinic access technically impossible)
Hash-chained audit log for tamper-evidence
Outbound HTTP audit handler + per-clinic daily budget guard
Secrets in Azure App Service Configuration (encrypted at rest)
MFA optional today, will become mandatory for clinical roles
Annual penetration testing planned

Updates

Revised whenever a sub-processor is added/replaced (see sub-processors) or when a new processing operation begins. Significant changes are announced to all clinics with 30-day notice (GDPR Art. 28(2)).