Privacy Policy

AYAANIS Technologies, Inc. ("AYAANIS," "we," "our," or "us") provides enterprise-grade governance infrastructure for long-term care facilities and pharmacy operations. We respect the privacy of our website visitors, clients, and authorized platform users. This Privacy Policy details our practices regarding the collection, use, safeguarding, and disclosure of information across our corporate website and our proprietary SaaS platforms.

By accessing our website or utilizing our platforms (including ANTEC, AARIP, CORE, MAWAS, and EVIDEX), you acknowledge that you have read and understood the practices described in this Privacy Policy.

1. Scope of This Policy

This Privacy Policy distinguishes between two primary categories of data we process:

• Corporate Website Data: Information collected from visitors to ayaanis.com, individuals who request demonstrations, or those who contact us for enterprise inquiries.
• Platform Operations Data: Information, including Protected Health Information (PHI) and clinical/financial data, processed on behalf of our enterprise clients through our software platforms.

2. Information We Collect

2.1 Corporate Website Data

When you interact with our public website to request a demonstration, download enterprise resources, or contact our sales and support teams, we may collect:

• Identifiers: Name, professional email address, phone number, and physical address.
• Professional Information: Job title, facility/company name, NPI numbers (if applicable), and organizational details.
• Technical Data: IP addresses, browser type, device identifiers, operating system, and metadata regarding your interaction with our site (e.g., via cookies and strictly necessary analytics to ensure site security and performance).

2.2 Platform Operations Data (Client Data & PHI)

AYAANIS acts as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). For authorized users of the ANTEC and AARIP platforms, we strictly process data as directed by our enterprise clients (the Covered Entities). This data may include:

• Protected Health Information (PHI): Patient identifiers, medical records, prescription data, and administration logs necessary for executing medication workflows (ANTEC) and revenue integrity audits (AARIP).
• Authorized User Data: Cryptographic attribution logs, staff identifiers, and system interaction metadata necessary to enforce the MAWAS accountability framework.
• Financial & Claims Data: Pharmacy claims, remittance advice, and audit findings generated within the platform.

Note: AYAANIS does not claim ownership of Platform Operations Data. Our use of this data is strictly governed by executed Business Associate Agreements (BAAs) and Master Service Agreements (MSAs).

3. How We Use Information

3.1 Delivering Enterprise Services

We utilize the collected information strictly to fulfill our contractual and operational obligations, including:

• Enforcing deterministic workflow guardrails within the ANTEC platform.
• Executing deterministic audit logic and generating financial exposure reports within the AARIP platform.
• Maintaining the EVIDEX unalterable evidentiary trace for regulatory compliance and audit defense.
• Authenticating authorized personnel and attributing operational actions.

3.2 Business Operations & Communications

For website visitors and client administrators, we use contact information to respond to enterprise inquiries, schedule briefings, provide technical support, and issue critical platform or security updates.

3.3 Absolute Prohibition on Data Monetization

AYAANIS does not, and will never, sell, rent, or monetize your personal information or any Protected Health Information (PHI) processed through our platforms. We do not aggregate clinical or financial data for the purpose of selling it to third-party data brokers, pharmaceutical companies, or marketing agencies.

4. Data Sharing and Disclosure

We may share information only in the following restricted circumstances:

• With Enterprise Clients: Platform Data is accessible to the respective client organization and their authorized administrators in accordance with the EVIDEX and CORE visibility frameworks.
• With Service Providers: We may engage vetted, compliant third-party infrastructure providers (e.g., secure cloud hosting) who are contractually bound by rigorous confidentiality agreements and BAAs to support platform operations.
• For Legal & Regulatory Compliance: We may disclose information if required to comply with a subpoena, legal process, or regulatory mandate, or to protect the vital interests, rights, and safety of AYAANIS, our clients, or the public.

5. Data Security & Architecture

Because we operate as a governance infrastructure for highly regulated entities, security is foundational to our platform architecture. AYAANIS implements stringent administrative, physical, and technical safeguards, including:

• Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Access Controls: Role-Based Access Control (RBAC), mandatory Multi-Factor Authentication (MFA), and zero-trust architectural principles.
• Audit Logging: The MAWAS module maintains immutable, cryptographically secure logs of all system interactions to detect and prevent unauthorized access.

For detailed information on our security posture, please visit our Security Center.

6. Data Retention

We retain Corporate Website Data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. Platform Operations Data (including PHI) is retained strictly in accordance with the retention periods specified in our client agreements and the evidentiary requirements of applicable law. Upon termination of a contract, data is securely destroyed or returned to the client per the BAA.

7. Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to access, correct, or request deletion of your data. To exercise these rights regarding Corporate Website Data, please contact us at the address below.

Please note: If you are an employee or patient of an AYAANIS enterprise client, you must direct your data privacy requests (such as HIPAA access requests) directly to that healthcare facility or pharmacy. AYAANIS cannot independently fulfill access or deletion requests for PHI.

8. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our operational practices, platform capabilities, or legal obligations. We will post the revised policy on this page and update the "Last Updated" date. For material changes affecting the handling of Platform Operations Data, we will notify client administrators directly.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data governance practices, please contact our Compliance and Privacy Team at:

AYAANIS Technologies, Inc.
Attn: Privacy Officer
1700 Market St, Suite 1005
Philadelphia, PA 19103
Email: privacy@ayaanis.com
Phone: +1 215-666-0376