shield_person
Our Commitment
We believe privacy is a fundamental human right. At MedNote, we never sell your clinical data. Our infrastructure is built to exceed industry standards for medical software security.
Trust & Transparency
Privacy Policy & Terms
Last Updated: October 24, 2024
Version 4.2.0 - HIPAA Compliant
lock_reset
Zero Knowledge
Where possible, we implement end-to-end encryption. This means even our staff cannot view your sensitive patient records without explicit temporary authorization.
1. Scope of Agreement
This Privacy Policy describes how Clinical Atelier Health ("MedNote", "we", "us", or "our") collects, uses, and discloses your personal information when you use our medical practice management platform, websites, and related services.
By accessing or using our services, you agree to the terms of this Privacy Policy and our Terms of Service. If you do not agree, please do not use the service.
2. Data Protection
verifiedEncryption
AES-256 bit encryption for data at rest and TLS 1.3 for data in transit across all systems.
Redundancy
Triple-redundant storage across isolated geographic regions ensuring 99.99% data availability.
Audit Logs
Immutable logs tracking every access attempt and modification to clinical records.
“The security of patient information is not just a feature; it is the foundation of our existence as a medical technology provider.”
3. HIPAA Compliance
MedNote acts as a "Business Associate" under HIPAA for our covered entity clients. We enter into a Business Associate Agreement (BAA) with every clinical practice to ensure:
- check_circleAppropriate safeguards to prevent unauthorized use or disclosure of PHI.
- check_circleImmediate reporting of any security incident or breach.
- check_circleMandatory staff training on security and privacy protocols.
- check_circleAssistance with patient rights to access and amend their health information.
infoHIPAA CERTIFIED INFRASTRUCTUREView BAA Template
4. Your Privacy Rights
Depending on your location (e.g., California/CCPA, Europe/GDPR), you may have certain rights regarding your personal information:
Right to Accesschevron_right
Right to Erasurechevron_right
Right to Data Portabilitychevron_right
Visual representation of our distributed secure data network.
5. Cookie Policy
We use essential cookies to keep the platform secure, remember session state, and protect clinical workflows from unauthorized access. Optional analytics cookies are used only to improve product reliability and may be disabled where required by law.
Questions about our Terms?
Our legal team is available for clarification on any policy point.