HIPAA / GDPR (International)
This policy is part of what you agree to when you create an account or consent to a session. Ask us anything about it before you agree.
HarborMind maintains a HIPAA Business Associate Agreement (BAA) with all infrastructure sub-processors and undergoes independent SOC 2 Type II audits.
For clients in the EU/UK
We act as a data controller under GDPR. EU client data is stored in EU data-residency regions. You may lodge a complaint with your local supervisory authority.
Cross-border transfer
Where data must cross borders, we rely on Standard Contractual Clauses or equivalent safeguards.