Privacy Policy
Effective Date: June 2024. At SidmiAI Health, protecting patient and clinician data is our highest priority.
1. Introduction & Scope
SidmiAI Health ("we," "our," or "us") provides clinical AI documentation and intelligence software to healthcare providers, clinics, and enterprise health systems. This Privacy Policy explains how we collect, use, disclose, and safeguard information across our platform and digital services.
2. Protected Health Information (PHI) & HIPAA
As a Business Associate to healthcare providers under the Health Insurance Portability and Accountability Act (HIPAA), SidmiAI Health processes Protected Health Information (PHI) strictly in accordance with executed Business Associate Agreements (BAAs). We employ end-to-end encryption, strict zero-trust access controls, and comprehensive audit logging to ensure PHI remains secure and confidential at all times.
3. Information We Collect
- Account & Clinic Data: Name, work email, clinic name, role, and professional credentials.
- Clinical Audio & Documentation: Audio recordings of clinical encounters, generated SOAP notes, and structured clinical summaries (processed strictly under BAA terms).
- System Usage & Telemetry: Access logs, IP addresses, device identifiers, and diagnostic metrics to maintain system stability and security.
4. Zero Data Retention & AI Model Training
We believe in absolute data sovereignty. SidmiAI Health does NOT use customer PHI or clinical recordings to train our core foundation models. Once clinical notes are successfully pushed to your Electronic Health Record (EHR) system, ephemeral processing buffers are purged in compliance with our zero-retention architecture.
5. Data Security
We implement enterprise-grade technical, physical, and administrative safeguards, including AES-256 encryption at rest, TLS 1.3 encryption in transit, role-based access control (RBAC), multi-factor authentication (MFA), and continuous vulnerability monitoring.
6. Contact Our Privacy Officer
If you have questions regarding this Privacy Policy, our HIPAA compliance program, or your BAA, please contact our Data Protection Officer at:
privacy@sidmiaihealth.com