Privacy Policy

Information We Collect

We collect account information, contact information, usage data, support messages, and other information you provide when using Evida.

When authorized by your organization, Evida may process clinical documents, EHR-derived records, registry fields, quality measure data, evidence spans, reviewer notes, and workflow metadata needed to provide the Service.

How We Use Information

We use information to provide clinical abstraction, evidence review, registry reporting, accreditation reporting, quality workflow support, customer support, security monitoring, and service improvement.

We may use aggregated or de-identified information to understand product performance and improve workflows, where permitted by applicable agreements and law.

Protected Health Information

Evida is built for healthcare workflows and may process protected health information when authorized by a covered entity or business associate.

Where required, Evida handles protected health information according to applicable business associate agreements and healthcare privacy obligations.

Google User Data

If Evida receives information from Google APIs, that use will adhere to the Google API Services User Data Policy, including Limited Use requirements.

We do not use data obtained from Google Workspace APIs to develop, improve, or train generalized artificial intelligence or machine learning models.

Sharing

We do not sell personal information or clinical data.

We may share information with service providers that help us operate, secure, host, support, and improve Evida, subject to appropriate contractual protections.

We may disclose information when required by law, to protect rights and safety, or as part of a corporate change with appropriate notice and safeguards.

Retention

We retain information for as long as needed to provide the Service, meet legal obligations, resolve disputes, enforce agreements, and support audit or security requirements.

Customer-controlled clinical data retention may be governed by your organization's agreement with Evida.

Security

We use technical, administrative, and organizational safeguards intended to protect information handled by Evida.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your Choices

You may request access, correction, deletion, or export of personal information where required by applicable law.

Some requests may need to be handled through your organization if your account is managed by an employer, hospital, or other customer.

Contact

For questions about this Privacy Policy, contact [email protected].