1. Scope and Commitment to Healthcare Privacy
NOUSVIA AI PRIVATE LIMITED ("Nousvia", "we", "our", or "us") is dedicated to protecting the privacy and security of confidential healthcare data, including Protected Health Information ("PHI") under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), the Health Information Technology for Economic and Clinical Health Act ("HITECH"), and applicable data privacy statutes.
2. Role as a Business Associate
When Nousvia processes clinical data, electronic health records (EHR), claims, or prior authorization data on behalf of hospitals, health systems, or provider networks ("Covered Entities"), we act strictly as a Business Associate. All such data is handled in strict accordance with the executed Business Associate Agreement (BAA) and applicable laws.
3. Non-Use of PHI for Public AI Models
Under no circumstances does Nousvia sell, rent, commercialize, or transfer patient PHI to third-party public AI providers. Customer data is strictly segregated in dedicated tenant VPCs and is never used to train public or shared multi-tenant foundation models.
4. Data Security and Technical Safeguards
Nousvia maintains SOC 2 Type II certified technical, physical, and administrative safeguards. All data in transit is encrypted using TLS 1.3, and data at rest is encrypted with AES-256 keys. Continuous vulnerability testing, penetration audits, and access logging are enforced.
5. Contact Our Privacy Office
Inquiries regarding our privacy practices or requests for our Business Associate Agreement may be addressed to:
Privacy & Compliance Officer
Nousvia AI Private Limited
Sector 45, Noida, Gautam Buddha Nagar, Uttar Pradesh - 201303, India
CIN: U62011UW2026PTC258986
Email: info@nousviahealth.com