Data handling
Summary of data in Veridian Motion. See Data model & privacy for detail.Current Lovable builds use synthetic data only. Retention and deletion
for real PHI follow the agency agreement after compliance migration.
What we collect
What we do not collect in logs
- Clinical narrative in application logs
- Raw photos in audit entries
- AI prompt/response content in standard logs
Where data lives
United States regions via Lovable Cloud / Supabase unless dedicated environment under contract.Retention and deletion
Per agency agreement. Export window at contract end; deletion procedures and certificates on request.PDF export
Staff may export assessment PDF from the dashboard. Where configured, send to an allowlisted email. Communication Record PDF is admin-only and audit-logged.What’s next
HIPAA
BAA framing.
Incident response
Incident procedures.