Healthcare and financial services clients ask these questions during procurement. The answers are published rather than negotiated, because a commitment you have to extract in a meeting is not much of a commitment.
Follow one patient enquiry through the whole system. Every point it is touched — and every boundary it never crosses.
A patient submits an enquiry through your form.
Most multi-tenant systems filter by tenant in application code, which works right up until someone forgets a WHERE clause. Switch tenant below and watch what the others can see.
Health information is sensitive information under the Privacy Act 1988, with a materially higher threshold for collection, consent and handling than ordinary personal information. Retrofitting that after someone asks is not a plan.
| Question | Answer |
|---|---|
| Where does our data live? | Australian region, isolated at row level per tenant |
| Who can see it? | Named engineers on your engagement. Access is logged |
| Is it used for training? | No. Contractually, and across every provider in the chain |
| How long is it retained? | Defined windows per data class, with automated deletion |
| What happens if we leave? | Code and data handed over. Ten business days to cure, no auto-renewal |
| Insurance? | Professional indemnity and cyber cover. Certificates on request |
Most contracts leave this deliberately vague, because vagueness is leverage. Ours is a timeline you can read before you sign.
No penalty, no minimum term, no automatic renewal
If the issue is fixable, we have ten business days to fix it
Agent code, configs, prompts, eval suites — transferred to your repo
Full export in an open format. Deleted from our side on request
The system is yours. It does not stop working because we stopped
Free inference tiers are funded by your prompts. They carry no service agreement, no data-processing agreement, and quotas that change without notice. They are entirely appropriate for our internal tooling and entirely inappropriate for anything of yours.
Every client-facing system runs on a paid provider under a data-processing agreement with zero retention configured. It costs more. It is not a place to save money.