← Back to AideClear

Security & Data Handling

Last updated September 10, 2026

AideClear is designed to handle sensitive agency and workforce compliance information with conservative access and automation controls.

Access controls

Agency data is separated by tenant. Authenticated access and row-level database controls restrict users to agencies they are authorized to access. Elevated backend functions use membership checks and restricted service credentials.

Private document storage

Caregiver and agency documents are stored in private object storage. Temporary signed links are used when a document must be viewed or analyzed, and those links expire.

Automated document review

Automated analysis does not automatically satisfy a requirement unless configured safety checks pass. For caregiver documents, AideClear evaluates document type, identity match, readability, required fields, expiration status, and confidence thresholds. Ambiguous results are routed to review instead of being treated as cleared.

Verification and audit trail

AideClear records compliance actions, document review results, external verification outcomes, and audit findings so agencies can understand how a status was reached.

Operational monitoring

AideClear monitors critical background services including document analysis, outreach, external verification, OIG data freshness, regulatory-source health, and scheduled jobs. Failed or stuck work is surfaced for remediation.

Encryption

Application traffic is served over HTTPS. Sensitive service credentials are stored outside the frontend and are not embedded in the public application.

Patient data

AideClear is currently intended for workforce and agency compliance records, not patient clinical records. Customers should not upload patient charts, treatment notes, or other patient-care documentation unless AideClear has explicitly agreed in writing that the required contractual and technical safeguards are in place.

Security reporting

Security concerns may be reported to compliance@aideclear.com.