Who we are
Trusted Summaries is a product of KaiAgentx. We provide medical record summarization software for Qualified Medical Evaluators (QME), Agreed Medical Evaluators (AME), Independent Medical Examiners (IME), attorneys, and claims professionals.
If you have questions about this policy, contact us at TrustedSummaries@KaiAgentx.ai.
Data we collect
Account information
When you create an account or contact us, we collect:
- Name, email address, and professional credentials
- Organization name and billing information
- Login credentials (passwords are hashed and never stored in plaintext)
Medical records you upload
When you use Trusted Summaries to process medical records:
- Uploaded PDF files are stored in encrypted Azure Blob Storage
- Records are processed to generate summaries, then the processing artifacts are retained only as long as needed for your active case
- We do not use your medical records to train AI models
- We do not share medical record content with any third party except as required to provide the service (see "Third-party services" below)
Website analytics
On this marketing website (trustedsummaries.com), we use Google Analytics 4 to understand how visitors find and use our site. This collects:
- Pages visited, time on page, and navigation paths
- Referral source (how you found us)
- Device type, browser, and approximate geographic region
- No personally identifiable information is collected by analytics
Analytics cookies are only activated after you provide consent via the cookie banner. You can decline and use the site without any tracking.
HIPAA compliance
Trusted Summaries is designed to handle Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA):
- Encryption at rest and in transit — All medical records are encrypted using AES-256 at rest and TLS 1.2+ in transit
- Access controls — Role-based access ensures only authorized personnel can view case data
- Audit logging — All access to PHI is logged and auditable
- Business Associate Agreements (BAAs) — Available for enterprise and covered-entity workflows
- SOC 2 Type II — Security documentation available to qualified enterprise buyers under NDA
- Data isolation — Each organization's data is logically isolated; no cross-tenant access is possible
Third-party services
We use the following third-party services to provide Trusted Summaries:
- Microsoft Azure — Cloud infrastructure (compute, storage, networking). All data resides in US data centers. Microsoft is our infrastructure provider under a BAA.
- Anthropic (Claude) — AI model provider for document summarization. Medical records are sent to Anthropic's API for processing. Anthropic does not retain input data beyond the API call and does not use it for training. Anthropic's data handling is governed by their enterprise terms.
- Stripe — Payment processing. We never store credit card numbers; Stripe handles all payment data under PCI DSS compliance.
- Google Analytics — Website analytics on this marketing site only (not the application). Activated only with user consent.
Cookies
This website uses the following cookies:
- _ga, _ga_* (Google Analytics) — Distinguishes unique visitors and tracks session information. Set only after you accept cookies via the consent banner. Expires after 2 years.
- ts_cookie_consent (localStorage) — Remembers your cookie preference so we don't ask again. Stored locally, never sent to any server.
The Trusted Summaries application (ts.kaiagentx.ai) uses session cookies for authentication. These are strictly necessary and do not require consent.
Your rights
You have the right to:
- Access — Request a copy of the personal data we hold about you
- Correction — Request correction of inaccurate personal data
- Deletion — Request deletion of your account and associated data
- Data portability — Request your data in a machine-readable format
- Opt out of analytics — Decline cookies via the banner, or revoke consent at any time by clearing your browser storage and revisiting the site
To exercise any of these rights, email TrustedSummaries@KaiAgentx.ai. We respond within 30 days.
Data retention
- Medical records and case data — Retained for the duration of your active subscription plus 30 days after account closure, then permanently deleted
- Account information — Retained while your account is active; deleted within 90 days of account closure
- Analytics data — Google Analytics retains aggregated data for 14 months; individual session data expires after 2 months
- Audit logs — Retained for 7 years per HIPAA requirements
Data security
We implement industry-standard security measures including:
- All data encrypted at rest (AES-256) and in transit (TLS 1.2+)
- Infrastructure hosted in SOC 2 Type II certified Azure data centers (US West)
- Network isolation via Azure Virtual Networks and Private Endpoints
- Regular vulnerability scanning and security audits
- Multi-factor authentication available for all accounts
Children's privacy
Trusted Summaries is a professional tool for licensed medical and legal professionals. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email to active account holders. The "Last updated" date at the top of this page reflects the most recent revision.
Contact
For privacy inquiries, data requests, or questions about this policy: