Privacy Policy

We collect information necessary to provide and improve our healthcare AI services. This includes:

• •Account information: Name, email address, organization name, and professional role when you register or contact us.
• •Usage data: How you interact with our platform, including session data and feature usage, to improve our services.
• •Protected Health Information (PHI): Collected only as necessary to deliver our services under strict HIPAA-compliant Business Associate Agreements (BAAs).
• •Communication data: Information you provide when contacting support or requesting a demo.

We adhere to the principle of data minimization -- we collect only what is necessary for the stated purpose and nothing more.

Elora is fully committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA). As a healthcare AI platform, we understand the critical importance of safeguarding Protected Health Information.

• •We execute Business Associate Agreements (BAAs) with all covered entities before accessing any PHI.
• •All PHI is encrypted at rest and in transit using industry-standard AES-256 and TLS 1.2+ encryption.
• •We maintain comprehensive audit trails for all access to PHI.
• •Our workforce undergoes mandatory HIPAA training and operates under strict access controls.
• •We have documented incident response and breach notification procedures in full compliance with federal and state requirements.

For details on our full compliance posture, visit our Trust Center.

We implement rigorous technical, administrative, and physical safeguards to protect your data:

• •Encryption: End-to-end encryption for all sensitive data, both at rest and in transit.
• •Access controls: Role-based access, multi-factor authentication, and strict least-privilege policies.
• •Infrastructure: Secure, HIPAA-compliant data centers with continuous monitoring.
• •Testing: Regular security assessments, vulnerability scanning, and penetration testing.
• •AI ethics: Responsible AI development with human oversight, bias monitoring, and model validation.