Our commitments.
The policies, disclosures, and safeguards behind every Lorraine product. Flat and scannable — when you come here, you usually have a specific question.
- Region
- af-south-1 (Cape Town)
- Privacy
- POPIA aligned
- Status
- Decision support
- Contact
- legal@uselorraine.co.za
Where we stand.
POPIA
We are the responsible party for personal information processed in our products. Rights and complaints escalation are documented in the privacy policy. POPIA has neither a certification scheme nor a register of responsible parties, so we say aligned — never certified, and never registered.
Clinical governance
Lorraine products are clinical decision support — not medical devices. Licensed clinicians remain responsible for all clinical decisions.
Data residency
Application data and backups are hosted in AWS af-south-1 (Cape Town). Model inference currently runs on GPU capacity in the United States. Every provider and the country it operates from is listed in our sub-processor register.
The full index.
| Document | Last updated |
|---|---|
| Policies | |
| Privacy PolicyHow we collect, use, and protect personal information under POPIA.POPIA statementData processingSecurity overview | 28 April 2026 |
| Terms of ServiceThe contract between you and Lorraine for use of our products. | 28 April 2026 |
| Medical DisclaimerClinical AI limitations, clinician responsibility, and scope of use. | 28 April 2026 |
| Acceptable Use PolicyRules for using Lorraine responsibly — prohibited uses and clinician obligations. | 28 April 2026 |
| SubprocessorsEvery third party that processes personal information on our behalf, and the country it operates from. | 28 April 2026 |
| Issued during procurement | |
| Data Processing AgreementA POPIA-aligned DPA. Not published on the site — we issue it against an institutional contract. Follow this link to ask for a copy. | On request |
| Support & response commitmentsGeneral enquiries get a published one working day reply target. Contractual support scope and severity-based commitments are agreed per institution rather than published as a standing SLA. Follow this link to ask for the draft schedule. | Per contract |
| Model & safety | |
| Lor-1 model cardIntended use, disclosure boundaries, known limits, and safety posture. | Tracks Lor-1 v1.0 |
Application data stays in af-south-1. Inference does not, and the register says so.