Privacy and security
How documents are handled during the restricted pilot.
Documents are encrypted in transit and at rest using protection managed by our hosting and cloud providers.
Uploads and exports are kept in private account storage. The app checks account ownership whenever a review or file is opened or downloaded.
Review content is sent to OpenAI for processing. Access is limited to approved pilot accounts.
Details and limitations
These controls isolate customer accounts within the app. Privileged GaviaMed hosting administrators, infrastructure providers and OpenAI may be able to access stored or processed content when needed to operate, secure, support or legally administer their services.
OpenAI background processing temporarily retains response data for about 10 minutes so the app can retrieve the result. This pilot does not claim zero data retention, end-to-end or customer-exclusive encryption, SOC 2 certification, or HIPAA compliance.
Customer-held encryption keys are deferred and are not required for this pilot.
For contractual terms, read the Terms of Service and Privacy Notice.