AYAANIS logoAYAANIS
Book a demo
Legal

Privacy Policy

AYAANIS Technologies, Inc. is committed to strong data protection, security, and regulatory compliance across our website and our platforms.

Last updated: April 1, 2026

AYAANIS Technologies, Inc. ("AYAANIS," "we," "our," or "us") provides software for long-term care facilities and pharmacy operations. We respect the privacy of our website visitors, clients, and authorized platform users. This Privacy Policy details our practices regarding the collection, use, safeguarding, and disclosure of information across our corporate website and our SaaS platforms.

By accessing our website or using our platforms (including ANTEC, AARIP, CORE, MAWAS, and EVIDEX), you acknowledge that you have read and understood the practices described in this Privacy Policy.

1. Scope of this policy

This Privacy Policy distinguishes between two primary categories of data we process:

  • Corporate website data: Information collected from visitors to ayaanis.com, individuals who request demonstrations, or those who contact us for enterprise inquiries.
  • Platform operations data: Information, including Protected Health Information (PHI) and clinical or financial data, processed on behalf of our clients through our software platforms.

2. Information we collect

2.1 Corporate website data

When you interact with our public website to request a demonstration, download resources, or contact our sales and support teams, we may collect:

  • Identifiers: Name, professional email address, phone number, and physical address.
  • Professional information: Job title, facility or company name, NPI numbers (if applicable), and organizational details.
  • Technical data: IP addresses, browser type, device identifiers, operating system, and metadata about your interaction with our site (for example, via cookies and strictly necessary analytics to ensure site security and performance).

2.2 Platform operations data (client data and PHI)

AYAANIS acts as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). For authorized users of the ANTEC and AARIP platforms, we process data as directed by our clients (the Covered Entities). This data may include:

  • Protected Health Information (PHI): Patient identifiers, medical records, prescription data, and administration logs necessary for medication workflows (ANTEC) and revenue integrity audits (AARIP).
  • Authorized user data: Attribution logs, staff identifiers, and system interaction metadata necessary to enforce the MAWAS accountability framework.
  • Financial and claims data: Pharmacy claims, remittance advice, and audit findings generated within the platform.

Note: AYAANIS does not claim ownership of Platform operations data. Our use of this data is governed by executed Business Associate Agreements (BAAs) and Master Service Agreements (MSAs).

3. How we use information

3.1 Delivering services

We use the collected information to fulfill our contractual and operational obligations, including:

  • Guiding medication workflows within the ANTEC platform.
  • Running audit logic and generating financial exposure reports within the AARIP platform.
  • Maintaining the EVIDEX evidentiary trace for regulatory compliance and audit defense.
  • Authenticating authorized personnel and attributing operational actions.

3.2 Business operations and communications

For website visitors and client administrators, we use contact information to respond to inquiries, schedule demos, provide technical support, and issue important platform or security updates.

3.3 No data monetization

AYAANIS does not, and will never, sell, rent, or monetize your personal information or any Protected Health Information (PHI) processed through our platforms. We do not aggregate clinical or financial data to sell it to third-party data brokers, pharmaceutical companies, or marketing agencies.

4. Data sharing and disclosure

We may share information only in the following restricted circumstances:

  • With clients: Platform data is accessible to the respective client organization and their authorized administrators in accordance with the EVIDEX and CORE visibility frameworks.
  • With service providers: We may engage vetted, compliant third-party infrastructure providers (for example, secure cloud hosting) who are contractually bound by confidentiality agreements and BAAs to support platform operations.
  • For legal and regulatory compliance: We may disclose information if required to comply with a subpoena, legal process, or regulatory mandate, or to protect the vital interests, rights, and safety of AYAANIS, our clients, or the public.

5. Data security and architecture

Because we build software for highly regulated entities, security is foundational to our platform architecture. AYAANIS implements administrative, physical, and technical safeguards, including:

  • Encryption: Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
  • Access controls: Role-based access control (RBAC), multi-factor authentication (MFA), and zero-trust principles.
  • Audit logging: The MAWAS module maintains immutable, cryptographically secure logs of system interactions to detect and prevent unauthorized access.

For more on our security posture, see our regulatory and compliance page.

6. Data retention

We retain corporate website data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. Platform operations data (including PHI) is retained in accordance with the retention periods specified in our client agreements and the evidentiary requirements of applicable law. Upon termination of a contract, data is securely destroyed or returned to the client per the BAA.

7. Your rights and choices

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to access, correct, or request deletion of your data. To exercise these rights regarding corporate website data, please contact us at the address below.

Please note: if you are an employee or patient of an AYAANIS client, you must direct your data privacy requests (such as HIPAA access requests) directly to that healthcare facility or pharmacy. AYAANIS cannot independently fulfill access or deletion requests for PHI.

8. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our operational practices, platform capabilities, or legal obligations. We will post the revised policy on this page and update the "Last updated" date. For material changes affecting the handling of platform operations data, we will notify client administrators directly.

9. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our data governance practices, please contact our Compliance and Privacy Team at:

AYAANIS Technologies, Inc.
Attn: Privacy Officer
Philadelphia, PA
Email: privacy@ayaanis.com