Data handling & privacy
EasyHTA is built around data minimization: the platform works from aggregate survival data. This page explains what the app accepts, where your data is processed and stored, how it is protected, how long it is kept, and the controls you have over it.
Our approach
Health-economic analysis does not need individual patient records, and EasyHTA is designed so that none enter the system. You work from aggregate survival data (time and survival-probability coordinates), whether digitized from a published Kaplan–Meier curve or derived from your own trial. That aggregate data can still be commercially confidential, which is why the protections below apply.
What you can upload
Survival data is uploaded as a two-column table: time and survival. The app checks every upload against a strict allow-list and accepts those two columns only: any additional column is rejected at upload rather than ignored, and a column that looks like a personal identifier, for example a name, email address, medical record number, date of birth, patient or subject ID, or similar, is named in the error so you know what to remove. A rejected file is never sent.
Where analysis runs
Reconstruction (rebuilding a synthetic, pseudo-individual dataset from your survival curve) and parametric model fitting run on our servers, hosted in the European Union. These computations are stateless: the uploaded data is read into memory, processed to produce the response, and is not written to disk or to file storage.
Our servers keep technical logs to operate and secure the service. They do not record the contents of your uploads or results.
What we store
The platform saves your project to your account as you work, so you can return to exactly where you left off: your inputs, settings, reconstructed data, and results, together with the project name and version history. It also stores the information needed to run your account and workspaces, such as your workspace membership and role.
What we do not store:
- Your original upload as a file.
- Payment card details. Billing is handled by a dedicated payment processor (see Billing).
- Personal or clinical identifiers, which the upload allow-list prevents from entering the system in the first place.
Where it is stored, and how it is protected
Saved data is stored in the European Union. It is encrypted at rest and encrypted in transit over HTTPS/TLS.
Who can access your work
Access requires signing in, and your sessions are protected with standard web security controls. Optional two-factor authentication, using an authenticator app, is available from Settings for extra protection on your account.
Within a workspace, what each person can see and do is governed by their role, and projects are private to you until you choose to share them with the workspace. Roles and sharing are covered in detail in Workspaces & collaboration.
Retention and deletion
You can delete a project at any time, including after your subscription ends. Deleted analyses are scheduled for removal from our live systems after 90 days; backups can retain a copy for up to 35 days after that, with restricted recovery access. Pending workspace invitations expire automatically after 7 days. Backups and point-in-time recovery exist to protect against accidental loss and operational failure.
Your data, exportable on demand
You can download your data at any time from the Billing page, including after your subscription ends, as a single file covering your account details, your workspace memberships, and a record of each analysis you created, both private and shared, together with each analysis’s headline results. Work created by other members of your workspaces is not included. Read access to your saved work, and the ability to export it, survive the end of a subscription. This supports your right of access and makes it straightforward to take your work elsewhere. To delete your account data, contact us at eemil@easyhta.com.
Billing
Subscription billing is handled by Stripe, a PCI-compliant payment processor. We never see or store your card details; we keep the plan, billing period and, if provided, VAT ID needed to manage your subscription.
No third-party tracking of your content
EasyHTA does not run third-party analytics, advertising or session-recording tools in the app. Server logs are technical, used to operate and secure the service, and are kept for a limited period. The app uses only the cookies needed to sign you in and secure your session.
Policies and contracts
Our privacy policy has the full legal detail and the full list of recipients. The application subprocessors are Amazon Web Services (hosting, storage and email delivery) and Stripe (payment processing). On Enterprise plans, DPA, MSA and SLA terms are agreed in the contract.
LinkedIn