Privacy

Most of this website handles account, subscription, and configuration data only. Chart review happens inside the extension, against your own EMR, and nothing about a patient reaches us that way.

The coding tool is the exception, because it has to be: you upload physician documentation and we read it. It runs on Google Cloud under a signed Business Associate Agreement. By default the documents are passed straight through to be read and are then dropped — they are not written to disk, to a database, or to a log, and what remains is the codes and your own reference.

An agency can choose otherwise. In Coding settings you can ask us to keep each review — the documents, the intake as you corrected it, the answer, the codes you tell us you actually used, and the note a coder writes about why — so that our suggestions can be checked against real coding and corrected where they are wrong. Without that setting we keep the codes, which are your own output, and never ask for the note. You choose how long it is kept, from 30 days to a year, and it is deleted automatically at the end of that period. It is stored encrypted, every access is logged, it is never sold, and it is never shared outside QA Plus. The setting is off until somebody at your agency turns it on, and you can turn it off at any time.

A full privacy policy will be published here before launch.