> ## Documentation Index
> Fetch the complete documentation index at: https://developer.suki.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security & Compliance

> Security, compliance, and data retention policies for the Suki Developer Platform

<Accordion title="How Long Will You Maintain the Data Related to ambient_session_id?">
  Suki retains and deletes your data for each <Tooltip tip="A single, time-bound instance of an ambient recording for a specific patient encounter that captures clinical conversations." cta="View in Glossary" href="/Glossary/a">ambient session</Tooltip> according to the following schedule:

  * **Audio input**: The original audio recording is permanently deleted after **30** days.

  * **Transcript**: The <Tooltip tip="The text version of recorded audio from clinical conversations, generated by automatic speech recognition." cta="View in Glossary" href="/Glossary/t">transcript</Tooltip> generated from the audio is permanently deleted after **30** days.

  * **Clinical note**: The final <Tooltip tip="The structured medical documentation produced for a patient encounter. In Suki, ambient note generation organizes content into LOINC-coded sections so partners can review, edit, and submit notes into an EHR-ready workflow." cta="View in Glossary" href="/Glossary/c">clinical note</Tooltip> is retained for the duration of your **service contract**.
</Accordion>

<Accordion title="How Is Data Security Handled within the Suki Platform?">
  To protect your data and comply with HIPAA, Suki uses multiple layers of technical, administrative, and physical security. Key measures include:

  * **Encryption in transit**: All data transmitted to and from the Suki platform is encrypted using **TLS 1.2**.

  * **Encryption at Rest**: Data at rest is encrypted using **AES-256** with Google Cloud services, such as Cloud SQL and Google Cloud Storage.

  * **Edge protection**: Suki uses a Web Application Firewall (WAF) from **Akamai** to protect all edge traffic.

  * **Data de-identification**: Suki uses de-identified and anonymized data for model training purposes. Any data that is used for ML training and improving the product is de-identified. For audio, we use a de-identification algorithm that breaks audio into chunks and isolates them such that the original audio cannot be re-constructed. We de-identify the transcript by removing all PII.
</Accordion>

<Accordion title="What Measures Are in Place to Protect Patient Privacy?">
  Suki uses comprehensive technical, administrative, and physical safeguards to protect patient privacy and secure data.

  Before your integration sends personal data to the platform, the <Tooltip tip="A healthcare professional who provides direct patient care and uses Suki's documentation services." cta="View in Glossary" href="/Glossary/c">clinician</Tooltip> is **responsible for obtaining patient consent**. This responsibility includes:

  * Maintaining their own consent policies that govern the collection, use, and disclosure of personal data.

  * Obtaining all necessary authorizations from a patient before any personal data is made available to Suki.

  **Additional privacy protections:**

  * We do not identify the clinician or the patient in the voice recordings.

  * Suki does not create or retain any voice signatures. We use voice only for transcription and summarization of the notes.

  * We de-identify voice recordings by chunking files. We remove <Tooltip tip="Protected Health Information. Individually identifiable health information protected under HIPAA regulations." cta="View in Glossary" href="/Glossary/p">PHI</Tooltip> from text transcripts to prevent individual identification.

  For complete details on how Suki handles data, read the [**Suki Privacy Policy**](https://www.suki.ai/privacy-policy/).
</Accordion>

<Accordion title="How Does the Suki Platform Ensure Compliance with Relevant Healthcare Regulations?">
  Suki complies with **HIPAA requirements**, which ensure data privacy laws are met. We sign Business Associate Agreements (BAA) for patient data handling with our customers.
</Accordion>

<Accordion title="Does Suki Offer Reseller Agreements?">
  Through the Suki Reseller Program, you can embed the Suki Platform's core technology directly into your own solution. This allows you to sell your application powered by Suki's assistive technology.
</Accordion>