Privacy Policy

This policy applies to www.abaauditshield.com and the ABA AuditShield platform (the "Service"). PHI processed on behalf of a covered entity is governed by the customer's Notice of Privacy Practices and our Business Associate Agreement (BAA) with that customer, which control over this policy if they conflict.

• Account data: name, email, work title, agency name, hashed password.
• Content data: documents you upload or paste into the Service, including PHI when applicable.
• Usage data: timestamps, IP address, user agent, audit events.
• Communications: support requests and feedback you send us.

To provide, maintain, and improve the Service; to authenticate users; to detect and prevent fraud and abuse; to comply with legal obligations; and as authorized under the BAA.

We do not sell personal information. We do not use PHI for marketing, advertising, or model training.

We disclose information only to: (a) sub-processors listed on our Sub-processors page, each bound by a BAA where PHI is involved; (b) law enforcement when legally compelled; and (c) successors in a merger or acquisition, subject to equivalent protections.

Account data is retained while the account is active and deleted within 30 days of termination unless longer retention is required by law. PHI is retained per the customer's instructions in the BAA. Audit logs are retained for at least six years per 45 CFR §164.316(b)(2).

Individuals whose PHI we process should contact the covered-entity agency that collected it. For account-level requests (access, correction, deletion), email privacy@abaauditshield.com.

The Service is not directed to individuals under 13, and we do not knowingly collect personal information directly from children. PHI about minor clients is processed only on behalf of covered-entity agencies under a BAA.

The Service is hosted in the United States. By using the Service you consent to processing in the U.S.

We will post material changes to this policy on this page and update the effective date. Continued use after changes constitutes acceptance.

Privacy Officer · privacy@abaauditshield.com