// LEGAL
Privacy policy
Replicate.Health operates as a HIPAA Business Associate. We process Protected Health Information (PHI) only on behalf of our covered-entity customers under a signed Business Associate Agreement, and we do not sell or use PHI for any purpose outside the contracted scope.
Our full privacy policy is in legal review. To request the current draft or ask a specific question, email legal@replicate.health.
For details on how we handle data, encryption, retention, and access controls, see our security posture.