3. Purpose

3.1 X-X.TECH will use the cohort only to evaluate identity-linked consent flows in EDGE ID and the decision-support features of JudeAI. The cohort may also be used for product marketing analytics. No other purpose is permitted without a new signed agreement.

3.2 The cohort is fully synthetic, generated with Synthea UK from published NHS reference distributions. It contains no record derived from a real patient, and every NHS number is drawn from the 999 000 0xxx test range.

4. Data in scope

4.1 The tables below, at the lineage versions shown, are the only data covered. Any later version needs a schedule update signed by both reviewers.

5. Lawful basis and safeguards

5.1 Because no personal data is processed, UK GDPR Article 6 does not apply to the cohort itself. Re-identification testing will still run every quarter, and the results go to the Caldicott Guardian within ten working days.

5.2 Access is limited to named EDGE ID accounts at High assurance on a bound device. Every query is logged with a signed receipt kept for 90 days for seven years, and receipts are readable by both parties on request.

5.3 Exports leave EDGE ID only as aggregates with cell counts of ten or more. Small-number suppression is applied before the receipt is signed.

6. Retention and archive

6.1 At the end of the study the cohort moves to the labelled archive store. Nothing is destroyed without the Owner's written approval. Archived versions stay queryable by the audit role only.

6.2 Derived outputs, including models, charts and receipts, keep the lineage ID of the cohort version they came from.

7. Roles

7.1 Controller for this agreement: X-X.TECH Ltd. Reviewer: Caldicott Guardian, Dr Helen Ward synthetic. Technical lead: Priya Raman. Data protection officer to be confirmed. Data protection officer: Tom Marsh.

8. Audit

8.1 Jude will produce a monthly receipt digest listing every query, the role that ran it, rows scanned and any export, signed with the EDGE ID audit key.