Data Privacy & Client Information Handling
Your data is handled with care, confidentiality, and purpose.
Athreon handles client information responsibly throughout transcription, scribing, and other documentation workflows. We use client data only as necessary to provide contracted services and support applicable privacy, security, and compliance requirements.
Our Approach to Data Privacy
Organizations trust Athreon with information that may be confidential, sensitive, or regulated. Protecting that information is fundamental to how we deliver our services.
Our approach to data privacy centers on responsible handling, appropriate access, confidentiality, and transparency. We work to ensure that client information is used only for legitimate business purposes associated with the services our clients request.
Athreon does not sell client data.
Privacy requirements can vary by industry, jurisdiction, service, and technology environment. We work with clients to understand applicable requirements and support appropriate safeguards throughout the documentation workflow.
How We Use Client Data
Client information is used to provide and support the services a client has authorized Athreon to perform.
Depending on the solution, this may include processing audio, video, documents, transcripts, clinical documentation, or other information necessary to complete the requested work.
Our guiding principles include:
- Using client information only for authorized service-related purposes.
- Limiting unnecessary access to sensitive information.
- Maintaining confidentiality throughout the documentation workflow.
- Supporting contractual privacy and data-handling requirements.
- Avoiding unrelated commercialization or sale of client data.
The specific data involved and how it is processed may vary according to the service and technology used.
Data Storage, Retention & Deletion
Data retention requirements are not the same for every client or service.
Storage and retention may depend on the technology platform, contracted service, applicable regulatory requirements, and client-specific needs. Athreon works with technology providers and clients to support appropriate data-handling practices throughout the information lifecycle.
When clients have specific retention or deletion requirements, those requirements can be evaluated as part of the implementation, contracting, or security-review process.
Because different Athreon solutions may use different technology environments, clients with specific data residency, retention, or deletion requirements should discuss those requirements with us before implementation.
Third-Party Technology & Service Providers
Athreon uses established technology and service providers to support the delivery of certain solutions. These providers may host or process information within their respective environments as part of the services Athreon provides.
Athreon evaluates applicable privacy and security considerations when working with service providers and seeks to align those relationships with contractual, regulatory, and client requirements.
The technologies involved vary by solution. Clients conducting vendor due diligence may request additional information about the systems and providers relevant to their proposed workflow.
Supporting Client Privacy & Security Reviews
Privacy and security reviews are increasingly important parts of vendor selection, particularly for regulated organizations.
Athreon supports client due-diligence processes and can provide information relevant to the services and technology under consideration. Depending on the engagement and applicable systems, this may include:
- Security and privacy questionnaires.
- Business Associate Agreements (BAAs), when applicable.
- Information about data handling, retention, and deletion.
- Security and compliance documentation.
- Information concerning relevant technology providers and hosting environments.
- Available third-party assurance documentation, such as applicable SOC reports.
Because Athreon works with multiple technology environments, the documentation available may vary according to the solution being evaluated.
Data Privacy FAQs
No. Athreon does not sell client data. Client information is used as necessary to provide and support the services authorized by our clients.
Access depends on the service and workflow. Athreon seeks to limit access to personnel and approved resources who require it to perform their responsibilities. Applicable confidentiality, training, screening, and client-specific requirements may also apply.
Retention varies depending on the service, technology environment, contractual requirements, and applicable client or regulatory requirements. Clients with specific retention or deletion requirements should discuss them with Athreon as part of implementation or vendor review.
Yes. Athreon works with technology and service providers that support certain aspects of our solutions. The providers and environments involved vary by service. Relevant information can be addressed during security and vendor due diligence
Yes. Athreon regularly works with organizations that have vendor security, privacy, and compliance requirements. We can respond to appropriate due-diligence requests and provide available supporting information relevant to the proposed solution.
Yes. Athreon supports workflows subject to HIPAA and applicable CJIS requirements. The specific requirements and safeguards depend on the service, client, personnel, and technology environment involved.
Have a Security or Privacy Question?
Evaluating Athreon for a regulated or sensitive documentation workflow?
Our team can help address privacy requirements, security reviews, compliance documentation, and other vendor due-diligence questions.