Privacy Policy
This Privacy Policy describes how AssessHIPAA collects, uses, and protects information when you use our website and assessment services.
Last updated: August 16, 2026
Information we collect
We may collect the following types of information:
- Account information, such as your name and email address when you register
- Assessment information, including your assessment responses and related information you enter while using the service
- Technical information, such as browser type, device information, IP address, and usage data
- Communications, such as information you provide when contacting us for support or other inquiries
We collect only information that is reasonably necessary to provide and operate the service.
How we use information
We use collected information to:
- Provide, maintain, and improve the assessment experience
- Generate and display assessment results and reports
- Analyze assessment responses and organize findings
- Authenticate users and protect account security
- Respond to inquiries and provide support
- Monitor service performance and prevent misuse
- Maintain, secure, and improve the service
We do not sell your personal information.
Assessment information
Assessment responses may include information about your organization's security practices, policies, procedures, and systems.
- You are responsible for ensuring that the information you provide is accurate and appropriate for use with the service
- Do not enter protected health information (PHI), patient information, or other information that is not necessary to complete the assessment
AI-assisted analysis
Certain features of use artificial intelligence to assist with analyzing assessment responses and generating or presenting parts of your assessment results.
- AI is used selectively and is not involved in every part of the assessment or reporting process
- AI-generated results may contain errors and are reviewed and presented as assessment assistance, not as a determination of legal or HIPAA compliance
- We do not use your information to train third-party AI models unless we clearly disclose this to you and have an appropriate legal basis to do so
How we protect information
We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Service providers
We may use trusted third-party providers to help operate the service, including:
- Hosting and infrastructure providers
- Authentication and database providers
- Analytics, email, and security providers
- AI-assisted feature providers
These providers may process information on our behalf and are expected to use appropriate safeguards and only process information as necessary to provide their services.
Cookies and similar technologies
We use cookies and similar technologies to maintain sessions, remember preferences, support core site functionality, and understand how the service is used.
You can control cookies through your browser settings, although some features may not function properly if cookies are disabled.
Data retention
We retain account and assessment information for as long as your account is active or as reasonably necessary to provide the service, maintain security, resolve disputes, enforce our agreements, or comply with legal obligations.
When information is no longer needed, we may delete or anonymize it in accordance with our retention practices and applicable law.
Your privacy choices
Depending on where you live and applicable law, you may have rights to:
- Access the information we hold about you
- Correct inaccurate information
- Delete certain information
- Ask how your information is collected and used
To submit a privacy request, contact us using the information below. We may ask you to verify your email address or account before completing certain requests.
We will not discriminate against you for exercising privacy rights available to you under applicable law.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page.
If we make material changes to how we collect, use, or share personal information, we will provide appropriate notice as required by applicable law.
Contact
For privacy-related questions or requests, contact us at:
Email: coming soon