What we hold, where we hold it, who can reach it, and what we will never do with it. If something you need isn't on this page, ask us rather than assume.
HeedSync is a business associate. We sign a business associate agreement with every customer before any resident data goes in, and the agreement is available on request — not buried behind a click-through.
Four staff tiers, from executive down to care staff. Every permission is checked on the server when the request arrives, not by hiding a button. A carer can see the residents in their own home, and nothing from anyone else's.
Changes to resident and staff records are logged with who made them and when. Family portal access is logged too, so you can see which relative opened what. Statements, once issued, cannot be edited — a correction is a new statement that supersedes the old one.
On Google Cloud, in United States regions only, encrypted in transit and at rest. Your organization's data is separated from every other customer's.
HeedSync does not run resident data through an AI service, and nothing you put into HeedSync is used to train a model — ours or anyone else's. There is no setting to turn off, because there is nothing there.
The records you enter belong to you, not to us. Ask for them and we will give them to you in a form you can use. Leave, and we return or delete them as the agreement says.
These are commitments in our agreement, not preferences we might revisit.
No. Staff are assigned to homes, and the server checks that assignment on every request. Tier also matters: compliance and training records about a staff member are completed by an administrator or HR, never by the staff member themselves.
Their access is removed, and their employment history, certifications and the records they authored stay where they are. Nothing a departing employee did disappears from the trail.
Nobody, in the ordinary course of running the service. Access to customer data happens only when you ask us for help with a specific problem, and it is logged.
Only the resident they are linked to, and only what you have chosen to share — updates, photos, the medication list, visits, statements. Every view is logged, so you can see who looked and when.
Not today. If your organization needs it, tell us during the walkthrough so we can be honest about timing rather than vague about it.
Yes. Medication administration records export directly from the platform; for a full extract, ask us and we'll arrange it.
This page covers what we can state plainly today. If your insurer, your attorney or your state licensor needs detail we haven't put here — retention periods, recovery times, our subprocessor list — ask us and we will answer in writing.
Bring the questions your licensor asks you. We would rather answer them before you buy than after.