How Your Data Is Used

The one-sentence version

Everything your agency puts into ABARecords belongs to your agency: it is encrypted, kept in your agency's own database, used only to run the service for you, and never sold or shared.

What happens to what you enter

• Clinical and personnel records(clients, sessions, notes, plans, data points, staff files) are kept in your agency's own database and seen only by your agency's authorized users, according to their roles.
• ABARecords' staffsee them only under a written, time-limited access grant from your agency's director, for a stated purpose. Nobody has access because of their job title.
• Signed agreements and documents are sealed the moment they are signed: they cannot be changed, and their PDFs carry a verification code and a QR code to check them against the sealed original.
• AI-assisted documents use protected health information only through AI services covered by a business associate agreement and approved in writing by your agency. What they produce is not final until a qualified clinician reviews and signs it.
• Audit logs record who opened and changed what. They protect clients and staff alike, and your agency can review its own.

What we never do

• We never sell data. To anyone. Ever.
• We never use it for advertising, or for analytics across agencies.
• We never use it to train, tune or evaluate AI models.
• We never claim ownership of it. When an agency leaves, it keeps read-only access for 90 days to export everything; then its data is returned or destroyed as the Business Associate Agreement provides.

Visitors

Visiting the sign-in page or these pages stores nothing about you, apart from the servers' standard security logs: the IP address, the time, the page and the browser of each request.

Public pages

The sign-in page shows only what ABARecords publishes on purpose (photos, phrases and branding) and never contains client information. The public links used to fill in a questionnaire show no client's identity.