How Your Data Is Used (Draft)
Last updated: July 2026 · Status: draft for legal review · Plain-language explanation.
The one-sentence version
Everything your organization puts into ABARecords belongs to your organization; we store it only to run the service for you, we do not keep anything else, and we never sell or share it.
What happens to data you enter
- Clinical records (clients, sessions, notes, plans, data points) are stored in your tenant's partition and are visible only to your organization's authorized users, according to their roles.
- AI-assisted documents (generated notes, reports) are produced from the facts your clinicians provide plus your own records, and are saved as drafts your clinicians review and sign. AI providers process the text to generate the document and do not retain it for training under our configuration.
- Uploads (assessment PDFs, photos, documents) are stored for your tenant only and can be removed by your administrators.
- Audit logs record who accessed and changed what — a HIPAA requirement that protects clients and staff alike.
What we never do
- We never sell data. To anyone. Ever.
- We never use clinical data for advertising or cross-tenant analytics.
- We never claim ownership of tenant data; on departure it is exported to you and deleted from the platform.
- We store no data about people who merely visit the login page.
Public pages
The login page shows only content the platform administrator publishes on purpose (photos, phrases, branding). It never contains client information, and the public fill links used for questionnaires expose no client identity.