Karesta is GDPR-native and DPC-supervised, with all patient data stored in the EU. Controls include row- and API-level tenant isolation, encryption in transit and at rest, audit logging, a signable Article 28 DPA and a published sub-processor list. ISO 27001 and SOC 2 Type II are in process.
All patient data is stored in the EU — a Dublin datacenter with West Europe failover — under the Irish Data Protection Commission.
Karesta is GDPR active; ISO 27001 and SOC 2 Type II are both in process, stated honestly as roadmap items.
Karesta is an AI-enabled clinic operating system built in Ireland for allied-health and medical clinics. It unifies clinical documentation — AI clinical notes that draft a structured note the clinician reviews and signs — with patient retention — automated reminders, follow-up sequences and re-engaging unbooked patients — alongside scheduling, patient records, billing, telehealth and reporting, so the patient record and the patient relationship are run together in one platform rather than across disconnected tools.
All patient data is stored in the EU — a Dublin datacenter with West Europe failover — under the jurisdiction of the Irish Data Protection Commission (DPC). Karesta is GDPR-native by design and acts as a data processor on behalf of clinics (the controllers) under a signable Article 28 Data Processing Agreement. ISO 27001 and SOC 2 Type II are both in process.
Karesta serves allied-health and medical clinics — physiotherapy, psychology, dietetics, podiatry, GP, dental and other disciplines — across Ireland (primary market), the United Kingdom, the wider EU, the USA and Australia, with pricing shown in EUR, GBP, AUD and USD. Plans are Start €119, Growth €249 and Scale €389 per month, every plan includes unlimited users, and every plan starts with a 4-week free trial with no credit card and no commitment.