Legal & Compliance

PDPA-Aligned Data Protection Position

Provenant AI Labs designs its commercial website and enterprise engagement practices with reference to Singapore's PDPA baseline for personal data protection. For customer deployments, data handling responsibilities, roles, security measures, retention, access controls, and breach procedures should be documented in the applicable contract, statement of work, or data protection addendum.

AI Governance And Deployment Responsibility

Provenant AI products are positioned as localized operational infrastructure. Deployments should be assessed for purpose limitation, data minimization, security, human oversight, validation, review logging, and suitability for the customer's regulated environment. Healthcare or industrial use cases may require additional customer-side regulatory, clinical, safety, cybersecurity, or procurement approvals.

Pilot And Medical-Device Regulatory Position

Public product pages describe pilot concepts and stakeholder evaluation configurations powered by the PeachBot platform. They do not represent Health Sciences Authority (HSA) approval, medical-device registration, clinical validation, or authorization for diagnosis, treatment, monitoring, or patient management. Any Singapore deployment must be reviewed against the intended use, applicable HSA medical-device requirements, institutional governance, PDPA obligations, cybersecurity expectations, and site procurement processes before use in clinical or operational settings.

India Medical-Device And Telemedicine Position

Public product and case-study pages are not advertisements for diagnosis, cure, mitigation, treatment, monitoring, or prevention of disease in India. They are intended for qualified institutional workflow discussion only. Provenant products are not represented as CDSCO-registered or approved medical devices, diagnostic systems, treatment systems, monitoring systems, or patient management systems in India. Any India deployment must undergo classification, licensing, registration, clinical, cybersecurity, procurement, and institutional review under applicable Indian law, including the Medical Devices Rules, 2017 where relevant.

Provenant AI Labs does not provide medical consultation or telemedicine services to patients. Any India telemedicine service must be provided by appropriately qualified Registered Medical Practitioners and healthcare institutions under applicable National Medical Commission, Ministry of Health and Family Welfare, state medical council, and institutional requirements.

Security And Responsible Disclosure

Do not test, scan, or probe Provenant AI Labs systems without written authorization. Security concerns should be responsibly reported to the company through an approved contact channel once the production disclosure process is published.

Reference Frameworks

• Singapore PDPC - Personal Data Protection Act overview
• Singapore PDPC - Data protection obligations
• IMDA - Artificial intelligence governance resources
• HSA - Digital health products and medical-device registration
• CDSCO - Medical devices and diagnostics
• NMC/MoHFW - Telemedicine Practice Guidelines