Compliance

MediLink takes compliance first as the founding principle of platform design, establishing auditable controls across three dimensions — cross-border data, credential verification, and fund settlement — and continuously validating them against real cross-border data flows.

1. Compliance Positioning

The Platform is the first end-to-end stress-test scenario of the Xiamen Cross-Border Data Hub. As a core vehicle of the national pilot for international cooperation in the data sector, it validates end-to-end compliance, payment, and reception capabilities in a controlled environment.

2. Cross-Border Data Compliance Pathways

• Domestic storage: all sensitive personal information of a medical, health or identity nature is stored within the territory of the People’s Republic of China.
• Impact assessment: where cross-border provision is involved, a Personal Information Protection Impact Assessment (PIA) is completed under PIPL.
• Separate consent: separate consent of the data subject is obtained for cross-border provision matters, with records retained.
• Statutory pathways: security assessment, standard contract, or personal information protection certification applies as the case requires.
• Full traceability: cross-border data flows travel through the compliant channel, with traceable and auditable operations.

3. Credential and Authenticity Verification

• Medical institutions and experts: practice licenses and professional qualifications are verified, with credential files maintained for experts.
• Trade entities: business licenses, operating permits, and product registration certificates are verified.
• Document authenticity: submitted diagnosis reports, imaging, and supporting materials undergo formal review, with supplementary materials or re-verification requested where necessary.

4. Payment and Fund Compliance

• Hospital charges and service fees are listed separately, with transparent pricing and unified settlement.
• Payment channels hold the required business qualifications, and transaction records are retained for audit.
• Cross-border collection and foreign-exchange settlement are handled in accordance with applicable foreign-exchange regulations.

5. Information Security Measures

The Platform adopts transmission encryption, access minimization, permission tiering, operation logging, and regular audits; critical systems have disaster-recovery and backup capabilities. In the event of a security incident, we will notify the affected parties and report to the competent authorities in a timely manner as required by law.

6. Supervision and Feedback

If you identify compliance risks or violations on the Platform, please contact: support@amedilink.com | +86 15711598925. We will investigate and address reports promptly.