Pilot privacy notice

Clear boundaries for a responsible pilot.

Evidenote is currently a limited documentation-quality pilot. It is not authorized for protected health information or client-identifying information.

What we collect

We collect business contact and agency information submitted through request-a-call and onboarding forms, account information needed to operate a workspace, agency rule settings, and basic technical records needed to secure and operate the service.

What you must not submit

Do not enter client names, dates of birth, addresses, medical record numbers, diagnoses, Social Security numbers, insurance information, or other protected health information. AI review accepts de-identified pilot text only.

How services are used

Stripe processes payments. AI review sends de-identified text to the configured AI service to return a quality review. Evidenote does not sell personal information.

Retention and choices

Business information is retained as needed to operate the pilot and follow up on requests. Agencies may request correction or deletion through the Request a Call form and identify the request as a privacy request.

Before any PHI rollout

Evidenote will require appropriate contracts, risk analysis, access controls, incident procedures, and legal approval before permitting protected health information.

Effective July 20, 2026 · Pilot version