Frequently asked questions

These are the questions procurement teams, data-protection officers, and IT departments most often ask. For anything not covered here, reach out via the contact page.

About Clex

What is Clex?

Clex is a writing-support tool for municipal care documentation. It ships as a system keyboard on Android and iOS and as a browser extension on Chrome and Edge. It gives the care worker two things: care-domain word suggestions as the worker types, and a pictogram-based sentence proposal beneath the keyboard. The suggestions come from a model trained on care documentation language, not the general vocabulary of a phone keyboard. Once Clex recognises enough care concepts in the text, it shows a sentence in the chosen language with a matching pictogram beside each recognised word. Care workers write notes directly into their existing record system.

Who is behind Clex?

Clex A/S is a Danish healthcare-technology company founded in 2016, headquartered in Copenhagen with offices in Kolding and Malmö. The team built Wizkids, the reading-support tool used across Danish schools for years, and applied that language-technology expertise to care documentation. Clex Sweden AB (org.nr 559544-8001), Sweden.

Who uses Clex today?

Clex is in daily use in municipalities across Denmark and Sweden, serving both home care and residential care settings. See the home page for a selection of named municipalities.

Data, privacy, and GDPR

What data does Clex send from the device?

All text the care worker types remains on the device. When a sentence suggestion is requested, only the pictogram identifiers and the selected language code are sent to the Clex API. No free text, no keystrokes, no personal data.

Where are your servers?

Production infrastructure is hosted at Hetzner Online GmbH in Falkenstein, Germany (EU). All server-side processing stays inside the EU.

Do we need a Data Processing Agreement with Clex?

Generally, no. Because Clex does not receive personal data - only pictogram identifiers and language codes - the municipality remains the sole data controller for anything typed on the device, and no processor agreement is required. If your DPO reaches a different conclusion in your case, we can sign a DPA on request.

Are user keystrokes logged or monitored?

No. Clex collects only aggregated, anonymised operational counts (for example, how many sentence suggestions were accepted per day) to keep the service stable. Device identifiers are hashed. Keystrokes and free text are never collected or stored.

Can everything be deleted when we uninstall Clex?

Yes. On Android, iOS, and the Chrome or Edge extension, uninstalling removes all locally stored Clex data. The app also offers an in-app reset. On the server side, only aggregated, non-personal counts are kept for a limited period.

Does Clex work offline?

Mostly yes. Word prediction, text-to-speech, and translation all run on the device and work with no network connection. Sentence suggestions from pictograms currently use the Clex API over HTTPS, so a network connection is needed while that feature is in use; the text itself never leaves the device.

Deployment

How does a rollout work?

On Android and iOS, Clex is pushed to the fleet through the municipality’s existing MDM (mobile device management). Care workers can also activate Clex on a personal device via BYOD using a code from the deployment portal. For Clex Web, the browser extension is deployed via GPO on managed Chrome and Edge fleets. Detailed deployment guides are available on request - contact Uffe Gorm Pal Hansen.

How does licensing work?

Licensing is managed per municipality. At startup, Clex exchanges the licence key for a short-lived transport token (valid for around twelve hours) that identifies the customer organisation - not the individual user. The token carries no personal data.

Which record systems does Clex work with?

Clex works alongside the record systems Scandinavian municipalities already use, including Lifecare, Cura, Nexus, KMD Care, Treserva, Combine, and Procapita. Care workers write their notes directly into their record system; Clex does not replace it.

Security and documentation

Has a DPIA been conducted for Clex?

An internal legal and technical review found that Clex does not process personal data. A full DPIA is generally not required for this architecture. If your organisation determines a DPIA is appropriate, we can provide the underlying documentation and support the process.

How do we get the full security and compliance documentation?

The customer document pack (security management, secure development, infrastructure, business continuity, data protection and sub-processors, SLA, and GDPR Questions and Answers) is available on request. Ask Flakron Sojeva for Danish customers, Ron Karlsson for Swedish customers, or Uffe Gorm Pal Hansen for technical follow-up.

What happens if we report a security or reliability issue?

Reports go to Uffe Gorm Pal Hansen. We acknowledge the report within two working days and respond with a scope assessment, severity rating, and remediation timeline. Formal incident-response procedures are covered in the Business Continuity, Incident Response and Disaster Recovery document in the customer pack.

For anything else, the contact page lists named contacts by market and topic.