Privacy Policy

Last modified: May 9, 2023

The Privacy Policy describes how treats data when you use’s products, including information provided when you use’s products. In addition, the following describes our privacy practices that are specific to, a service that helps you store, organize, label, and annotate health data and information.

HIPAA Statement

Compliance with state and federal regulations regarding patient confidentiality, security, and privacy is the responsibility of all health care providers and related vendors. This includes, but is not limited to, compliance with the Health Insurance Portability and Accountability Act (HIPAA) of 1996. offers a set of DICOM compliant storage products that also comply with HIPAA and other privacy and security requirements and configurable storage and distribution systems that are designed to protect the privacy and security of patient information. software is configurable to help meet the end user’s needs and includes user authentication models such as traditional username and password, as well as SSL certificate verification and other customizable security tokens. One or more of these authentication models are required for all users accessing systems and software. Access to data is performed via the DICOM TLS protocol or HTTPS. products adhere to the DICOM standard. prohibits any user from sharing or disclosing their password, username, or other security tokens such as client SSL certificates, and any such disclosure shall constitute a breach of the Policies which shall allow in its sole discretion to terminate your account and prohibit any further access to the Site or the services. software allows for encryption when information is transmitted via the internet (SSL, TLS, or VPN). software provides an audit trail of all electronic events related to any data within our system. The log can be viewed for further analysis. supplies fault tolerant storage servers and other related technologies to support your disaster planning.

Your Data

  1. will host only anonymized data based on DICOM anonymization standards, unless the data is restricted to a HIPAA-compliant environment, with a BAA and other procedures in place.
  2. You control who can access your data. By default, you are the only user who can view and edit your information. If you choose to, you can share your data with others.
  3. will not sell, rent, or share your data without your explicit consent, except in the limited situations described in the Terms of Service, such as when believes it is required to do so by law.
  4. You can completely delete your data at any time. Deletion will be initiated immediately, and you information will be purged from your account shortly thereafter. Additional backup copies of deleted data may persist for a short time. Since deleted data will not be restored, you may want to ensure you have another copy of your data before deleting it.

Sharing your data

  1. If you share your data with others, you can view a list of who has access to your information and you can revoke sharing privileges at any time. When you revoke someone’s ability to access your data, that party will no longer be able to see your data, but may have already seen or may retain a copy of that data.

How uses your data

  1. To store your information in, you will need a Account. When you create a Account, asks for your name, email address, and a password, which is used to protect your account from unauthorized access.
  2.’s servers automatically record log information about your use of (such as number of sign-ins). This information is temporarily stored in association with your Account for a few months, at which point it is aggregated with other data and is no longer associated with your account. The log information will be used to operate and improve the service and will not be correlated with your use of other services.
  3. periodically reviews trend statistics and associations. may use data from your account to analyze these trends statistics which are aggregated data sets and do not contain any personally identifiable information.
  4. Certain features of can be used in conjunction with other products, and those features may share information to provide a better user experience and to improve the quality of our services.


Security informs everything we do and build at To ensure the highest standards of security, we:

  1. Enforce HTTPS everywhere, so data is encrypted with TLS in-transit.
  2. Ensure databases and file storage systems are encrypted at rest with AES-256.
  3. Operate servers within ISO 27001 certified data centers (and where required, HIPAA certified data centers) with multiple layers of physical security.
  4. Maintain detailed audit logs of all internal systems.
  5. Regularly review all internal systems for vulnerabilities and carry out patching as necessary.
  6. Regularly review log files for signs of intrusion, and inform impacted customers of security incidents as quickly as possible.
  7. Perform background checks on all employees who may potentially access confidential information.
  8. Conduct security training with all employees upon hire and regularly throughout employment.
  9. Perform code and security reviews of all software developed internally.
  10. For enterprise HIPAA environments, we maintain compliance with HIPAA regulations covering the security and privacy of confidential patient data by putting in place additional technical, physical, and administrative safeguards, as well as regularly engaging in third-party audits.

More information complies with the US-EU Safe Harbor Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries. has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement. To learn more about the Safe Harbor program, and to view our certification page, please visit

In compliance with the US-EU Safe Harbor Principles, commits to resolve complaints about your privacy and our collection or use of your personal information. European Union citizens with inquiries or complaints regarding this privacy policy should first contact has further committed to refer unresolved privacy complaints under the US-EU Safe Harbor Principles to an independent dispute resolution mechanism, the BBB EU SAFE HARBOR, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgement of your complaint, or if your complaint is not satisfactorily addressed by, please visit the BBB EU SAFE HARBOR web site at for more information and to file a complaint.

If you have additional questions, please contact us any time:, Inc.
199 Water St FL 34
New York, NY 10038