Where your records live, and who can see them.

• The files your workspace uploads for an audit, and the decisions, repair tasks, expert reviews and packets built from them.
• Account data: name, work email, role, workspace.
• An access log of every view, export and decision on patient data.

• The app and its database run with our hosting provider in its Singapore region.
• Uploaded files sit in object storage with encryption at rest, versioning and object lock turned on, so a file cannot be silently changed or deleted.
• Every connection uses TLS.

• Members of your workspace, by role. Viewers read; operators fix and rerun; experts decide and sign; admins manage the team and read the access log.
• Our staff, only to run the service or to answer a request from you. Every such access lands in the same log your admins can read.
• No one else. There is no analytics, advertising or tracking script on the site or in the app.

We sign a business associate agreement before any protected health information is uploaded. Until it is signed, the service holds synthetic or de-identified records only, and the sample audit uses de-identified records.

There is no government certification for HIPAA, so we do not claim one. Ask for our agreement and our security summary at hello@claimvet.com.

On request, we delete your workspace and everything in it, and we confirm the deletion in writing. Packets you have exported are yours to keep.