Data Use and HIPAA Notice

Adaptive Flow Studio is designed to work with:

• Synthetic or simulated data
• De-identified or anonymized operational data
• Aggregate or summary-level data
• Financial, staffing, capacity, throughput, and performance data
• Operational data that your organization has authorized you to use
• Patient flow and volume data that does not include individual-level identifiers

The platform is built for operational learning, not for storing or analyzing individual patient records.

Protected Health Information — data that can identify individual patients and is covered by HIPAA — may only be used in Adaptive Flow Studio in an approved workspace, where Adaptive Flow Health and your organization have the appropriate agreements (including a valid, signed Business Associate Agreement) and safeguards in place.

This includes individual-level clinical data, billing records, claims data, or any operational data that includes patient identifiers.

If you are uncertain whether your data contains PHI, treat it as PHI and do not upload it unless a BAA is in place.

You are responsible for determining whether the data you upload, paste, save, analyze, or export is appropriate for use in Adaptive Flow Studio. This includes:

• Understanding your organization's data governance policies
• Complying with applicable laws, including HIPAA where relevant
• Honoring any contractual or institutional data use agreements
• Ensuring you have authorization to upload the specific data you are submitting

Adaptive Flow Health does not review or validate the content of the data you submit for compliance with HIPAA or other laws.

Adaptive Flow Studio is not configured for PHI by default. That is true of every account, plan, studio, and workspace, however named, and of every user of them — no account tier or workspace type is excepted. PHI may be used only where Adaptive Flow Health has expressly approved the specific workspace in writing and a valid, signed Business Associate Agreement is in place.

Even de-identified, aggregate, or operational data may be subject to your organization's internal data governance policies. Check with your organization before uploading any data from internal systems.

Where an account has administrators, those administrators are responsible for ensuring that the people they invite understand and comply with applicable data use requirements. Adaptive Flow Health is not responsible for internal data governance decisions made by a customer organization or its administrators.

SQL or database connection features may be available to certain customers under additional review and written agreement. Database connections are not automatically enabled for any account.

Users may not connect Adaptive Flow Studio to production clinical systems, electronic health records, claims systems, or other sensitive data systems without explicit authorization from Adaptive Flow Health and appropriate organizational approvals.

Contact us to discuss database connection eligibility and required agreements.

If your organization needs a Business Associate Agreement, has questions about appropriate data use, or wants to discuss governed organizational use, contact us: