For clinic owners, insurers' legal teams and IT leads: how the product is designed, and what we have not done yet. No certifications, no badges.
Designed to follow the Personal Information Protection Law (PIPL) from the first row of data: every use of an owner's personal information has a stated purpose, needs the owner's separate consent and can be withdrawn at any time. Except where Chinese law requires it, for example when a clinic reports a notifiable animal disease such as rabies to the authorities.
Designed so clinical and pet records stay in mainland China (Shanghai), with no cross-border transfer without a legal basis. Access to product data by the founding team from outside mainland China counts as a transfer abroad: it would first need a legal basis under PIPL and the owner's separate consent, written into the agreement signed with the clinic. The product's cloud provider is not final, so this page names none.
Designed so every consent is recorded on its own: to whom, which data, for what, for how long. Consent is separate, revocable and logged; revocation is designed to take effect within seconds.
Designed so every read and write is logged with time, identity and scope, and can be traced afterwards; clinics and owners are meant to see who saw what, and when.
Designed so an insurer sees a pet's history only with the owner's separate, revocable consent. Pharma, research and brands are designed to receive only de-identified, aggregated signals. Insurance products are offered by a licensed insurer; Petnest AI provides the technology.
The AI scribe only drafts; the vet reviews and signs every note, and the AI does not diagnose. Drafts carry the label "AI-generated" and the status "AI draft · awaiting the vet's review"; nothing is saved until the vet has reviewed and signed. The owner assistant is designed to run on a large model filed in China and computed in mainland China; every answer is labelled AI-generated. No filing of our own is completed yet; it will be done as the law requires before launch.
Designed so the consult recording is used only to draft the note, never to train the AI, and so design-partner clinics' note text is used by default to improve the AI scribe, but only once anonymised: anything that identifies a person is removed and cannot be restored. Under PIPL, anonymised information is not personal information. A clinic can refuse in writing at any time; new notes are then no longer used for training. How long recordings are kept and this arrangement are both set in the written agreement signed before the collaboration starts.
Questions clinics askEncryption in transit and at rest; access by role, with owner, clinic and partner each holding their own token and no global key; keys issued per partner, with scoped tokens. No pet data is held on this website.
This website is hosted in mainland China by Tencent Cloud (Shanghai). Your enquiry is stored in mainland China; the founding team may read it from abroad, which we tell you and ask you to agree to. No cookies, no analytics. Your rights: access, copy, correct, delete, withdraw consent.
Privacy policyFound a vulnerability? Write to thomas@petnestdata.com or see security.txt. We acknowledge within one working day and keep details private until fixed.
No certification yet: this page describes how the product is designed.
Skip to content