Privacy and security
Is CauceOS compliant with data privacy regulations?
CauceOS complies with applicable data privacy regulations based on user jurisdiction: informed consent, right to access and delete, encryption, and limited retention.
Short answer: CauceOS complies with applicable data privacy regulations based on the user's jurisdiction. Specific legal details are in our privacy policy and terms of service.
Baseline protections CauceOS implements
Regardless of the specific regulation in your country, CauceOS applies a core set of measures:
- Informed consent: the bot announces its presence when joining the session; we also recommend explicit documented consent obtained in writing before the first assisted session
- Right of access: you can view all your data from the dashboard at any time
- Right to deletion: you can delete any session, report, or your full account
- Limited retention: data is retained for 90 days by default, not indefinitely
- Encryption at rest and in transit: industry-standard protection for sensitive data
- Data isolation: each organization is technically separated from all others
On HIPAA
CauceOS is not HIPAA-certified. If you practice in a jurisdiction where HIPAA applies directly to your clinical work, consult your legal counsel before using CauceOS with patients covered by that regulation.
Full legal framework
Complete legal details (specific regulatory frameworks, data processing bases, rights and timelines) are available in:
CauceOS implements professional-grade data privacy protections: informed consent, AES-256 encryption at rest and TLS 1.3 in transit, 90-day limited retention, right of access and deletion, and complete data isolation between organizations. CauceOS Help Center
Educational information. For jurisdiction-specific legal advice on regulatory compliance, consult a qualified attorney specializing in data privacy.
Related articles
Related articles
Didn't find what you were looking for? Write to us at [email protected]