Privacy, Compliance & Data Security

Platform Scope & Intended Use

Cerevo-N functions as a care coordination and documentation platform. It supports clinicians, therapists, direct staff, caregivers, and patients through structured workflows such as session tracking, program monitoring, notes management, and communication.

Cerevo-N does not independently diagnose, prescribe, or generate clinical decisions. All clinical judgment remains the responsibility of licensed professionals and participating care organizations.

Data Ownership & Control

All patient data entered into Cerevo-N remains the property of the originating clinic, hospital department, or authorized care organization. Cerevo-N does not claim ownership of clinical or personal data.

• Organizations control user access and permissions
• Role-based dashboards restrict visibility by responsibility
• Confidential notes remain hidden from caregivers by default

Regulatory Alignment

Cerevo-N is designed with alignment to applicable data-protection frameworks, including HIPAA and FERPA principles where applicable, depending on deployment context and jurisdiction.

• Minimum-necessary data access
• Audit-ready activity tracking
• Separation of clinical and caregiver views
• Support for Release of Information workflows

Security Safeguards

• Encryption of data in transit and at rest
• Secure, role-restricted authentication
• Session-based access controls
• Infrastructure hosted on compliant cloud environments

Access to production data by Aibi Tech personnel is restricted to authorized support or maintenance activities and is logged when required.

AI & Automation Guardrails

Cerevo-N may incorporate agentic AI components to assist with operational checks, data integrity, and compliance monitoring. These components are designed as support mechanisms and do not replace professional oversight.

AI features are governed by strict access boundaries, auditability, and organizational configuration.

Data Retention & Portability

Data retention policies are configurable by participating organizations. Upon request, data may be exported or securely deleted in accordance with organizational policy and applicable regulations.