Trust Center

Your Data is Safe.
That's Non-Negotiable.

HIPAA-compliant, encrypted end-to-end, and built for healthcare from day one. We never sell, share, or train on your data.

All Systems Operational
🏥 HIPAA
🌎 GDPR
🔒 CCPA
💳 PCI DSS
✅ 99.9% Uptime
Compliance

Certifications & Standards

We meet the strictest compliance standards in healthcare. BAAs and DPAs available on all plans.

🏥

HIPAA

Full compliance. BAAs signed on all plans.

Compliant
📜

SOC 2 Type II

AICPA Trust Service Criteria aligned.

Q3 2026
🌎

GDPR

Data processing agreements, right to erasure, portability.

Compliant
💳

PCI DSS

Level 1 payment processing via certified partners.

Compliant
📋

CCPA

Full California consumer rights and data transparency.

Compliant
Security

How We Protect Your Data

Every layer of our stack is built to keep patient data secure.

🔒

Encryption

AES-256 at rest, TLS 1.3 in transit. Keys managed via AWS KMS with automatic rotation.

☁️

Infrastructure

AWS multi-AZ deployment with VPC isolation, private subnets, and automated failover.

🛡

Network

WAF, DDoS protection via AWS Shield, and real-time traffic monitoring on all endpoints.

👥

Access Control

Role-based permissions (Head Admin, Admin, Doctor). Optional 2FA. JWT tokens with 8-hour expiry.

Data

Your Data, Your Rules

You own everything. Export it, delete it, or take it with you — anytime.

  • No AI Training: Your data is never used to train AI models. Contractually guaranteed.
  • No Data Mining: Never sold, shared, or used for third-party purposes.
  • One-Click Deletion: Full GDPR Article 17 compliance. Delete all data from your dashboard.
  • Data Export: Export everything in CSV or JSON at any time.
  • Daily Backups: Encrypted backups with 30-day retention and point-in-time recovery.
  • Data Residency: AWS US-East. EU residency available for Enterprise.
Reliability

99.9% Uptime, Guaranteed

Multi-region failover, daily backups, and 24/7 monitoring keep your chatbot always on.

✅

Uptime SLA

Automated failover across AWS availability zones. Enterprise customers get contractual SLA guarantees.

🔎

Security Testing

Annual third-party penetration testing. Executive summaries available for Enterprise under NDA.

Documents

Legal & Compliance Documents

Request or download directly from your dashboard.

📄

Business Associate Agreement (BAA)

HIPAA-compliant BAA available on all plans. PHI encrypted, access restricted, breach notification within 72 hours.

Contact compliance@chatgeniusx.com

📄

Data Processing Agreement (DPA)

GDPR-compliant DPA covering lawful processing, data subject rights, sub-processors, and EU-US data transfers.

Contact privacy@chatgeniusx.com

FAQ

Common Questions

Do you sign BAAs?+

Yes. BAAs are available on all plans. Contact compliance@chatgeniusx.com or request one from your dashboard.

Where is my data stored?+

AWS US-East (Virginia). EU data residency available for Enterprise. All data encrypted with AES-256 at rest and TLS 1.3 in transit.

Do you use my data for AI training?+

Never. Your data is used exclusively to provide our service. This is contractually guaranteed in our BAA and DPA.

What happens if I cancel?+

Export your data anytime. After a 30-day grace period, all data is permanently deleted from our systems including backups.

Start Your 14-Day Free Trial

Full Growth plan features, no credit card required. Your data is protected from day one.

Start Free Trial →