Legal
Data Processing, Retention & Deletion
TEMPLATE — LEGAL_REVIEW_REQUIRED.
Processing
- Each facility's data is processed solely to deliver the service, in an isolated per-facility database.
- Clinical observation records are append-only by design; corrections are new entries referencing the original.
- Encrypted backups run nightly, per facility, and are stored off-server.
Retention
- Active facilities: records retained for the life of the subscription. Behavioral-health record-retention obligations (commonly 7–10 years, varying by state and license) belong to the facility; the platform supports export at any time to satisfy them.
- Backups: retained per the schedule stated in your agreement.
Off-boarding & deletion
- On termination, the facility receives a complete export of its data.
- After the contractual wind-down period, the facility's database and backups are deleted; deletion is certified on request.
- Account deletion requests for individual workforce members: accounts are deactivated (ending all access) while their attributed actions remain in the audit record, as clinical-record integrity requires.