Security & privacy
What's true about your data today
We'd rather under-claim than over-claim. Below is how MsJaneHH handles data right now — and, just as clearly, what isn't finalized yet.
Private & agency-scoped
Assessment data belongs to the agency that created it. Access is scoped per agency — there is no shared pool of patient records across customers.
No aggregation or analytics
We don't combine agencies' data, and we don't run cross-agency analytics or "population" reporting. The product is a QA workflow tool, not a data platform.
No AI processing of clinical data
Clinical answers are checked by deterministic rules. No patient information is sent to any AI model or third-party model provider.
Not yet finalized — stated plainly
We are not publishing specific compliance claims yet. HIPAA-ready hosting and the associated safeguards (encryption standards, audit-retention periods, business-associate agreements) are a planned milestone, not a current guarantee. We will provide full compliance documentation for review ahead of any pilot agreement, so you can evaluate it against your own requirements before any real patient data is involved. Until then, please don't treat this page as a compliance attestation.
Have specific security questions for your agency's due diligence? Raise them in your access request and we'll respond directly.