diff --git a/docs/compliance/privacy-policy.md b/docs/compliance/privacy-policy.md index 20e6136..57c8365 100644 --- a/docs/compliance/privacy-policy.md +++ b/docs/compliance/privacy-policy.md @@ -73,7 +73,7 @@ All data in transit is encrypted via HTTPS (TLS 1.2 or higher). All data at rest Your uploaded CSV data and scored records are retained for the duration of your subscription plus 90 days. Upon termination of your subscription or pilot agreement, all data associated with your account will be deleted within 10 business days of your written request, and we will confirm deletion in writing. -Audit logs (records of actions taken on the platform) are retained for 7 years for compliance purposes. +Audit logs (records of actions taken on the platform) are retained for a minimum of 6 years, consistent with 45 CFR ยง164.530(j), for compliance purposes. --- @@ -85,9 +85,7 @@ Audit logs (records of actions taken on the platform) are retained for 7 years f ## HIPAA -Signal processes de-identified operational data. To the extent that any data processed by Signal could be considered protected health information under HIPAA, STTIL Solutions has executed a Business Associate Agreement (BAA) with its cloud infrastructure providers and operates appropriate administrative, physical, and technical safeguards. - -If you believe a Business Associate Agreement is required for your engagement with Signal, please contact us at the address below before uploading any data. +Signal processes de-identified operational data. The architecture is designed so that the data is not protected health information under HIPAA. A Business Associate Agreement (BAA) may not be required for your engagement with Signal. We encourage you to consult your own compliance advisors to determine whether a BAA is needed for your use case before uploading any data. --- @@ -102,7 +100,7 @@ In the event of a security incident affecting your organization's data, STTIL So Questions about this Privacy Policy or your data: **STTIL Solutions LLC** -Email: kisasttil@gmail.com +Email: Web: signal.sttilsolutions.com ---