Medical records are the most sensitive data a firm handles. Chronos treats every page as PHI — encrypted, access-controlled, audited, and protected by the safeguards described below. A Business Associate Agreement is available when the parties' roles and intended use require one.
HTTPS/TLS protects data in transit. Provider-managed encryption protects database records on Aptible and uploaded files in Google Cloud Storage.
Each user can reach only the cases and actions they need.
Security-relevant activity is recorded in a firm-scoped audit log that administrators can export for compliance review.
Database workloads run on Aptible's HIPAA-eligible infrastructure, object files use Google Cloud Storage, and application controls isolate each firm's data.
Confirm active hosting regions and AI provider routing in your security review. Provider retention and training terms require current contractual evidence.
Firm administrators can review and sign a Business Associate Agreement (BAA) in workspace settings at no extra cost.
Chronos uses the administrative, physical, and technical safeguards needed to handle PHI for covered entities and their business associates — defensibility that pays off across every case. See why teams choose Chronos.
HTTPS/TLS protects records in transit between your browser and the service.
Authorized services decrypt records for processing. Ask for the current AI provider agreement to verify its training and retention terms.
Stored and encrypted with AES-256, locked to your firm with role-based access and a full audit log.
Deleted cases move to recoverable Trash before an administrator or the retention process permanently purges them. Account deletion has a separate recovery period.
These statements summarize the product's documented data practices and application controls.
For the full written policies behind these controls, see our security policy documents →
Chronos sends the record text needed for a requested feature to the centrally configured AI route. The underlying provider, applicable agreements, and retention controls must be verified against the current production configuration. We do not use customer records to train or fine-tune models, sell them, or disclose them outside authorized processing except as required by law.
The production AI route's retention, logging, and training treatment require verification against the current provider agreements and active account configuration. This page does not make a Zero Data Retention guarantee.
Deleting a case or client moves it to Trash, where an administrator can restore it during the firm's configurable retention window (30 days by default, minimum 7). After that window, the nightly retention process hard-deletes its application data and attempts to remove associated stored files; an administrator can also choose Purge now from Trash. The purge result records any storage deletion failures for operational follow-up. A hard purge cannot be undone. Account deletion uses a separate 30-day recovery window.
Configured vendor locations are listed on the Subprocessors page. Confirm the current production configuration and applicable agreements before relying on a data-residency commitment.
Security-relevant actions are recorded in an audit log scoped to your firm. Firm administrators can export the log for compliance review.
We publish the vendors authorized to process customer data on our behalf, including the purpose, data categories, location, and documented BAA status for each service. View subprocessors →
$2M Tech E&O & Cyber Liability incl. AI endorsement; certificate on request.
Review the PHI subprocessors and BAA-scope disclosure and information security policy. Contact Chronos for executed agreements and current evidence.
Read How Chronos Uses AI for model inputs, source grounding, human review, and change-control boundaries.
Security researchers can read our Vulnerability Disclosure Policy for scope, reporting instructions, safe harbor, and response targets.
We'll share our BAA template, security documentation package, and a security questionnaire under NDA.