Privacy review
What Happens to Your Client Data?
Our automated comparison is unavailable while we review its provider claims. It cannot determine whether your account or workflow meets HIPAA requirements.
Where Reframe's clinical tools stand
Progress notes, worksheets, session prep and Thinking Partner run on Amazon Web Services under Amazon's Business Associate Agreement with Reframe. Your session text is processed for the request and not stored by Reframe on the server; Reframe keeps usage counts and, for progress notes, audit records, without session text, and anything you save to your library stays in your browser. Sharing is paused for now. Links shared earlier were stored as encrypted copies on the server; account and operational records have separate retention.
Before choosing a provider
- Verify the executed agreement and the exact account, services and features it covers.
- Map where information is processed, stored, logged and backed up.
- Review access, security settings, retention, recovery and incident procedures.
- Document the risks and safeguards for your actual workflow.
A BAA, encryption or a zero-retention claim alone does not establish compliance. Encrypted cloud storage can still require a BAA.
Read HHS guidance on cloud services