Availability
Where Clinic+ is available
Clinic+ stores patient records in the European Union, so whether a clinic may sign up depends on what its own country says about holding health data abroad. Rather than let anyone find that out at the end of a signup form, here is the whole list — 49 countries today.
Last updated 24 August 2026
01The European Economic Area
Patient records are stored in Belgium, so for a clinic inside the EEA nothing crosses a border that the GDPR treats as an export.
| Country | What puts it on the list |
|---|---|
| Austria | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Belgium | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Bulgaria | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Croatia | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Cyprus | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Czechia | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Denmark | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Estonia | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Finland | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| France | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Germany | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Greece | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Hungary | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Iceland | EEA Joint Committee Decision 154/2018 — the GDPR applies as EEA law |
| Ireland | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Italy | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Latvia | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Liechtenstein | EEA Joint Committee Decision 154/2018 — the GDPR applies as EEA law |
| Lithuania | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Luxembourg | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Malta | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Netherlands | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Norway | EEA Joint Committee Decision 154/2018 — the GDPR applies as EEA law |
| Poland | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Portugal | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Romania | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Slovakia | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Slovenia | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Spain | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
| Sweden | GDPR — the records sit in Belgium, so no Chapter V transfer arises |
02Countries with a standing adequacy recognition
The route from these countries to the European Economic Area is already covered by a decision their own regulator or the European Commission has taken. Nothing further is signed.
| Country | What puts it on the list |
|---|---|
| Andorra | EU adequacy decision |
| Argentina | EU adequacy decision 2003/490/EC |
| Brazil | ANPD Resolution CD/ANPD No. 32/2026 — mutual adequacy with the EU |
| Canada | PIPEDA, with EU adequacy 2002/2/EC for commercial organisations |
| Faroe Islands | EU adequacy decision |
| Guernsey | EU adequacy decision |
| Isle of Man | EU adequacy decision |
| Israel | EU adequacy, reaffirmed 15 January 2024 |
| Japan | APPI — the PPC’s equivalence list already covers the 30 EEA states |
| Jersey | EU adequacy decision |
| New Zealand | Privacy Act 2020, IPP 12 — satisfied by an EEA destination |
| Switzerland | revFADP — the EEA is on the Federal Council’s adequate list |
| United Kingdom | UK GDPR, with the EU adequacy decision in force |
| Uruguay | EU adequacy decision 2012/484/EU |
03Countries that do not restrict the transfer
These countries do not restrict sending personal data abroad, or restrict it in a way an ordinary processing agreement satisfies.
| Country | What puts it on the list |
|---|---|
| Hong Kong SAR China | PDPO s.33 — enacted in 1996 and never brought into force |
| India | DPDP Act 2023 s.16 — permitted except to countries the government notifies, and none are |
| Philippines | Data Privacy Act 2012 — no transfer restriction |
| Singapore | PDPA s.26 — no localisation rule; comparable protection by contract |
| Taiwan | PDPA art. 21 — permitted unless a destination is named |
04Everywhere else, and why
If a country is not listed above, Clinic+ cannot be used there yet. That is almost never a judgement about the country and never one about the clinic — it is about where the records physically sit.
Several countries require health data to stay inside their borders. No contract reaches that: serving them would mean hosting there, which is a different product rather than a different clause. Others allow the transfer but want a licence or a filing first, and some need an instrument we have not yet written. The last group is the one most likely to change, and it changes fastest where somebody asks.
Which is the practical point: if you are in a country that is not on this list, tell us. The signup flow offers to take your details at the moment it turns you away, and those requests are the list we work through. The security pageexplains where the data sits and why that is the deciding question.
05This is about the clinic, not the patient
The country that matters is where the clinic operates, because the clinic is the controller of its patients' records and its own regulator decides what may leave. Where the patients live does not change that, and neither does the language anybody speaks.
So a clinic in an available country can treat patients from anywhere, and the assistant will still speak to them in their own language. What it cannot do is move to a country on the closed side and carry the records along.
06If this changes
This page is generated from the same list the product enforces, so it cannot drift from what actually happens at signup. Adding a country is a deliberate act — it means the legal position was checked and any instrument it needs was written — and it is announced here first.
Existing clinics are not affected by a country coming off the list. Nothing here is applied retroactively to an account that already exists.