Health-tech scale-up: Quick Check for GDPR-compliant AI
Strategy and roadmap before quick-win hype
Illustrative scenario: this example shows a typical approach and does not describe a specific customer engagement.
Starting point
A health-tech scale-up of around 40 people has a rough idea of “AI for patient data” and wants to engage a vendor — but does not know what is actually permissible for German patient data.
Approach
Instead of building straight away, the work starts with a two-day Quick Check: GDPR mapping, auditability, technical options (local vs cloud AI), tool selection. The outcome is a written roadmap — Phase 1 local inference for triage, Phase 2 a RAG system for diagnostics support.
What the approach aims for
- No investment in cloud AI that cannot meet the requirements for patient data
- A roadmap that can be agreed internally and with the data protection officer
- An rzfz.ai Box as the foundation for Phase 1, on the premises