Skip to content

Your clinic may not be audit-ready. Most aren't — and don't know it yet.

EU and national compliance for aesthetic and longevity clinics — structural, operational, and data-protection readiness. Plain language, practical fixes, no law-firm overhead.

Portugal and DACH — Germany, Austria, and Switzerland

Where we work

Focused coverage for private-pay clinics in Portugal and the DACH region — not a generic EU-wide directory.

Portugal

English- and Portuguese-speaking clinics — aesthetics, longevity, and related private practices.

DACH

Germany, Austria, and Switzerland — including DSGVO/GDPR readiness and national clinic obligations.

Why this matters now

Regulators in Portugal and across the DACH region are paying closer attention to private-pay clinics — not just hospitals. Aesthetic and longevity practices face the same documentation, consent, and data-protection obligations as any healthcare provider, often with fewer internal resources to meet them.

Most enforcement actions we see stem from gaps in everyday operations: outdated consent workflows, incomplete treatment records, staff who were never trained on GDPR/DSGVO basics, or advertising that oversteps what clinical evidence supports. These are rarely cases of deliberate negligence — they are cases of not knowing what auditors will look for.

The financial and reputational consequences are real. A single data-protection complaint or licensing inspection can disrupt your practice for months. The cost of fixing problems under pressure is almost always higher than addressing them calmly, before an inspector arrives.

Six areas clinics most often miss

Each pillar addresses a specific gap we find during readiness assessments — and each has a clear fix path.

Compliance gap check

A structured readiness assessment of your clinic's documentation, workflows, and data practices. You receive a prioritised findings report — what to fix first, what can wait, and what is already in good shape.

Regulatory monitoring

Plain-language alerts when EU or national rules change in Portugal or DACH in ways that affect your practice. No legal jargon — just what changed, whether it applies to you, and what action to take.

Audit-ready documentation

Consent workflows, treatment records, incident logs, and retention schedules structured so an inspector can follow your paper trail without confusion. Templates and review included.

Data protection (GDPR / DSGVO)

Patient data handling, processor agreements, breach procedures, and privacy notices — the area where aesthetic clinics are most often found non-compliant. We map your current state against what regulators expect.

Staff training library

Recurring compliance training your team can complete in short sessions — consent procedures, data handling, incident reporting. Tracked so you can demonstrate due diligence if asked.

Specialist referral network

When a matter falls outside operational compliance — advertising law, marketing claims certification, complex licensing — we connect you with a vetted legal partner rather than guessing at the boundary.

What we handle — and what we don't

I'd rather tell you upfront what sits outside my scope than discover it during an inspection.

What we handle

  • Structural compliance readiness — licensing documentation, organisational requirements
  • Operational workflows — consent, records, incident logging, staff procedures
  • Data-protection readiness — GDPR/DSGVO mapping, privacy notices, processor agreements
  • Ongoing monitoring and retainer support for clinics in Portugal and DACH

What we refer out

  • Advertising law and marketing-claims certification
  • Formal legal representation or litigation
  • Clinical medico-legal opinions on treatment protocols
  • Complex licensing outside Portugal and the DACH region

Referrals go to a vetted legal partner — not a random directory listing. You stay with people who understand clinic operations.

How it works

  1. Book

    Tell us about your clinic in a short form. We'll confirm scope and schedule your gap check.

  2. Gap check

    A structured assessment of your documentation, workflows, and data practices — remote or on-site, depending on scope.

  3. Findings & fix list

    You receive a prioritised report: what's compliant, what's at risk, and exactly what to change. No vague recommendations.

  4. Ongoing retainer

    Optional monthly support — monitoring, documentation updates, staff training, and a direct line when rules change.

Clear pricing, no surprises

Compliance gap check

€600–900one-off

Full readiness assessment with prioritised findings report.

  • Documentation and workflow review
  • GDPR/DSGVO snapshot
  • Prioritised fix list
  • 30-minute findings call

Starter

€450/month

For clinics that completed a gap check and need light ongoing support.

  • Regulatory change alerts
  • Quarterly documentation review
  • Staff training library access
  • Email support (48h response)
Recommended

Standard

€900/month

Most clinics choose this — active monitoring and hands-on documentation support.

  • Everything in Starter
  • Monthly documentation review
  • Consent workflow maintenance
  • Incident log templates & review
  • Priority email support (24h response)

Premium

€1,500/month

For multi-site clinics or practices with complex data-processing needs.

  • Everything in Standard
  • On-site visit (quarterly)
  • Custom staff training sessions
  • Processor agreement reviews
  • Direct phone line

Get in touch

Tell us about your clinic in Portugal or DACH and we'll schedule a gap check. No obligation, no sales pitch.