Legal

Data Processing, Retention & Deletion

TEMPLATE — LEGAL_REVIEW_REQUIRED.

Processing

  • Each facility's data is processed solely to deliver the service, in an isolated per-facility database.
  • Clinical observation records are append-only by design; corrections are new entries referencing the original.
  • Encrypted backups run nightly, per facility, and are stored off-server.

Retention

  • Active facilities: records retained for the life of the subscription. Behavioral-health record-retention obligations (commonly 7–10 years, varying by state and license) belong to the facility; the platform supports export at any time to satisfy them.
  • Backups: retained per the schedule stated in your agreement.

Off-boarding & deletion

  • On termination, the facility receives a complete export of its data.
  • After the contractual wind-down period, the facility's database and backups are deleted; deletion is certified on request.
  • Account deletion requests for individual workforce members: accounts are deactivated (ending all access) while their attributed actions remain in the audit record, as clinical-record integrity requires.