Data Classification Register

Data classes

ANCHOR may handle the following classes of data:

• public website data
• account and authentication data
• clinic and tenant administration data
• governance metadata
• Assistant and governed-workflow metadata
• learning and CPD metadata
• policy and attestation metadata
• Trust Pack and self-assessment metadata
• incident and near-miss metadata
• public intake data
• billing data, if and when billing is enabled
• support communications
• AI-provider transient routing data, if live generation is enabled
• system logs and audit logs

Raw clinical content

Raw clinical content is not expected and is prohibited by default.

Personal data

Personal data is possible for several of these classes, for example account data, staff identifiers, reviewer attribution, public intake data, and support communications.

Sensitive or special-category data

Sensitive or special-category data is not expected and is prohibited by default, unless a specific authorised product flow and a corresponding agreement permit it.

Billing and payment data

There is no active payment processor and no live customer billing workflow. ANCHOR does not currently operate subscription, invoice, payment, refund, or customer billing processes, so no customer payment data is processed today.

Stripe is the intended future candidate payment processor for the M5.8 billing and payment foundations, subject to security, legal and commercial, pricing, VAT and accounting, cancellation and refund, and founder-approval gates. Until activated, Stripe is not treated as processing ANCHOR customer payment data.

billing@anchorvet.co.uk is a reserved, founder-monitored route for future billing and payment enquiries. It is not currently advertised as a public support route.

Draft note

Retention periods and any subprocessors for these classes are not confirmed here and are subject to the legal and commercial pack and solicitor review.