Governance at CuraData
External oversight, practical controls, and clear accountability for healthcare data infrastructure.
Independent external oversight for data governance and research participation.
Apply to join →Every data-touching release gets a formal safety entry and approval before shipping.
View process →Core policy set for privacy, security, and accountable platform operations.
View policies →Risk model
Four risk categories we evaluate for every data-related decision.
Re-identification, overcollection, and secondary-use drift.
Credential theft, insecure APIs, and breach propagation risk.
Representation gaps, accessibility barriers, and policy bias.
Automation overreach and incorrect workflow defaults.
Day-0 non-negotiables
Baseline controls in place before any patient data is handled.
- No production secrets in repos or client code.
- MFA enforced for admin and operator accounts.
- Separate production and staging environments.
- Encrypted backups with routine restore tests.
- Vendor/subprocessor inventory with DPA tracking.
- Admin actions logged and retained.
- Data and account deletion path implemented early.
- Breach notification workflow documented before scale.
Ethics Advisory Board
Independent external oversight from clinicians, ethicists, privacy experts, and patient advocates.
CuraData is building ophthalmology infrastructure used in real clinics. As we develop optional research pathways, we want external oversight — not internal-only decision making. The board reviews governance policies before they go live.
- Review and advise on data-governance policies
- Evaluate de-identification and re-identification risk controls
- Guide consent and opt-in standards across jurisdictions
- Review fairness and global representation considerations
- Advise on compensation and benefit-sharing principles
- Publish periodic transparency summaries where appropriate
- Ophthalmologists and retina specialists
- Clinical trial, IRB, or bioethics experts
- Health privacy and compliance professionals
- Patient advocates
- Global health and health-equity leaders
- Quarterly advisory sessions (virtual)
- Occasional async policy review
- 12-month term (renewable)
- Compensation or honorarium provided
Board principles: independent perspective, patient-first, optional participation only, global equity.
Apply to join the board
Submit your application in under 3 minutes.