Trust & Security

Privacy Policy

At Sanafin, data protection is a product principle, not just a legal requirement. We design our outcome-based contract systems to prioritize data privacy, security, transparency, and responsible processing at every layer.

Data Protection at the Core

We build our platform with privacy-by-design. Personal and commercial data is processed only to the extent necessary to structure, verify, and execute outcome-based healthcare contracts. We are committed to transparency, minimization of data footprints, and maintaining healthcare-grade security.

What Data We Collect

Account & Profile InformationNames, business email addresses, roles, and institutional affiliations.
Contract & Rules MetadataTarget thresholds, timeline boundaries, and logical criteria defining clinical outcome success.
Clinical Verification EventsDe-identified clinical biomarker feeds, digital health data, or audit-trail inputs uploaded to trigger contract payouts.

Why We Process Data

Contract ExecutionTo calculate cost performance, verify clinical milestones, and automatically trigger payout routing.
Auditability & OperationsTo maintain immutable history records for payers, providers, and auditors to review outcome performance.
Service ImprovementTo optimize behavioral engagement rules and support onboarding or integration requests.

How Data is Protected

We secure data using transport-layer encryption (TLS 1.3), encryption-at-rest (AES-256), strict role-based access controls (RBAC), and secure escrow system segmentation. All clinical verification events are de-identified at the source whenever possible, ensuring personal health information is not exposed to financial operators.

Data Sharing & Third Parties

Sanafin never sells personal or healthcare data. We share data only with authorized escrow bank institutions to route payouts or with neutral clinical verification platforms as specified under active, customer-consented contracting rules.

Your Rights

Depending on your jurisdiction, you have the right to access, rectify, or delete your personal data processed on our systems. You can manage access permissions for specific clinical integrations through your client dashboard at any time.

Privacy Contact

For data processing inquiries or to exercise your privacy rights, contact our trust team at: hello@sanafin.tech