What happens to your data

• We take out the details that point to a person: names, emails, phone numbers, street addresses, ID and account numbers, passwords and keys. Most are swapped for stand-ins.
• We keep the work: what was done, in what order, how long it took, and how it turned out.
• A stand-in is a made-up label that stays the same every time. Buyers can't turn one back into a name.
• Every date in a deal moves by the same number of whole weeks, so the order and gaps stay true. On HIPAA deals that use Safe Harbor, only the year is kept.
• Faces are blurred. Recordings with voices, private topics, anything that may involve children, and files we can't clean are held back until fixed.
• Buyers see a de-identified profile; your name only after you sign the NDA and LOI. The people in your data stay behind stand-ins. Nothing leaves without your sign-off.
• HIPAA applies only if the seller is a health care provider, a health plan, a claims clearinghouse, or a business associate of one. Most businesses, like a construction company, are not.
• De-identified isn't the same as zero risk. If we find a miss, we fix it and have buyers delete the old copy.

The full page, with examples and answers to common questions: jottings.ai/how-it-works/privacy