Health records archive software data terms
6 of 13 health records archive software vendors whose terms we read reserve the right to use their customers' data in aggregated or anonymised form, read 9 November 2026.
Vendor keeps aggregated or anonymised use
Who owns the business's data
Training AI on the business's data
Export at exit
Every answer from every vendor
Every row is a single vendor, and every answer expands to the wording it was taken from, the document it came from and when it was read. "Not stated" is used when the document says nothing on the point.
| Vendor | Who owns the business's data | Vendor keeps aggregated or anonymised use | Training AI on the business's data | Export at exit |
|---|---|---|---|---|
| Access (Triyam) | not statedNot addressed in Terms of Use and Privacy Policy | not statedNot addressed in Terms of Use and Privacy Policy | not statedNot addressed in Terms of Use and Privacy Policy | not statedNot addressed in Terms of Use and Privacy Policy |
| BridgeHead Software | not statedNot addressed in Privacy and Cookies Policy | reserved | not statedNot addressed in Privacy and Cookies Policy | not statedNot addressed in Privacy and Cookies Policy |
| ChartRequest | not statedNot addressed in Custodianship page | not statedNot addressed in Custodianship page | not statedNot addressed in Custodianship page | not statedNot addressed in Custodianship page |
| DocStar (Epicor) | not statedNot addressed in Privacy Policy | reserved | not statedNot addressed in Privacy Policy | not statedNot addressed in Privacy Policy |
| Flatirons Solutions | not statedNot addressed in Privacy Policy | reserved | not statedNot addressed in Privacy Policy | not statedNot addressed in Privacy Policy |
| GRM Information Management | not statedNot addressed in Privacy statement Not addressed in Medical Records Custodian Services page | reserved Not addressed in Medical Records Custodian Services page | not statedNot addressed in Privacy statement Not addressed in Medical Records Custodian Services page | not statedNot addressed in Privacy statement Not addressed in Medical Records Custodian Services page |
| Harmony Healthcare IT | not statedNot addressed in Privacy Policy | not statedNot addressed in Privacy Policy | not statedNot addressed in Privacy Policy | not statedNot addressed in Privacy Policy |
| Mediportal | not statedNot addressed in Privacy Policy | reserved | not statedNot addressed in Privacy Policy | not statedNot addressed in Privacy Policy |
| MediQuant | not statedNot addressed in Privacy Policy | reserved | not statedNot addressed in Privacy Policy | not statedNot addressed in Privacy Policy |
| MRO | not statedNot addressed in Privacy policy | not statedNot addressed in Privacy policy | not statedNot addressed in Privacy policy | not statedNot addressed in Privacy policy |
| RLDatix (Galen) | not statedNot addressed in Company Policies | not statedNot addressed in Company Policies | not statedNot addressed in Company Policies | not statedNot addressed in Company Policies |
| Secure Records Solutions | not statedNot addressed in Closing Medical Practice page | not statedNot addressed in Closing Medical Practice page | not statedNot addressed in Closing Medical Practice page | not statedNot addressed in Closing Medical Practice page |
| Verisma | not statedNot addressed in Privacy Policy | not statedNot addressed in Privacy Policy | will not train | not statedNot addressed in Privacy Policy |
Quoted wording for all 56 answers
- Access (Triyam), Terms of Use and Privacy Policy, read 2026-10-28, Who owns the business's data: No answer on the document, which ran to 46,279 characters when read on 2026-10-28.
- Access (Triyam), Terms of Use and Privacy Policy, read 2026-10-28, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 46,279 characters when read on 2026-10-28.
- Access (Triyam), Terms of Use and Privacy Policy, read 2026-10-28, Training AI on the business's data: No answer on the document, which ran to 46,279 characters when read on 2026-10-28.
- Access (Triyam), Terms of Use and Privacy Policy, read 2026-10-28, Export at exit: No answer on the document, which ran to 46,279 characters when read on 2026-10-28.
- BridgeHead Software, Privacy and Cookies Policy, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 17,158 characters when read on 2026-11-09.
- BridgeHead Software, Privacy and Cookies Policy, read 2026-11-09, Vendor keeps aggregated or anonymised use:
for systems administration and to report aggregate information to third parties affiliates
- BridgeHead Software, Privacy and Cookies Policy, read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 17,158 characters when read on 2026-11-09.
- BridgeHead Software, Privacy and Cookies Policy, read 2026-11-09, Export at exit: No answer on the document, which ran to 17,158 characters when read on 2026-11-09.
- ChartRequest, Custodianship page, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 4,219 characters when read on 2026-11-09.
- ChartRequest, Custodianship page, read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 4,219 characters when read on 2026-11-09.
- ChartRequest, Custodianship page, read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 4,219 characters when read on 2026-11-09.
- ChartRequest, Custodianship page, read 2026-11-09, Export at exit: No answer on the document, which ran to 4,219 characters when read on 2026-11-09.
- DocStar (Epicor), Privacy Policy, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 33,423 characters when read on 2026-11-09.
- DocStar (Epicor), Privacy Policy, read 2026-11-09, Vendor keeps aggregated or anonymised use:
we may pseudonymize and/or anonymise your Personal Data for business purposes including to improve our products and services, in which case we may use such information without further notice to you
- DocStar (Epicor), Privacy Policy, read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 33,423 characters when read on 2026-11-09.
- DocStar (Epicor), Privacy Policy, read 2026-11-09, Export at exit: No answer on the document, which ran to 33,423 characters when read on 2026-11-09.
- Flatirons Solutions, Privacy Policy, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 51,791 characters when read on 2026-11-09.
- Flatirons Solutions, Privacy Policy, read 2026-11-09, Vendor keeps aggregated or anonymised use:
We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments
- Flatirons Solutions, Privacy Policy, read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 51,791 characters when read on 2026-11-09.
- Flatirons Solutions, Privacy Policy, read 2026-11-09, Export at exit: No answer on the document, which ran to 51,791 characters when read on 2026-11-09.
- GRM Information Management, Medical Records Custodian Services page, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 4,672 characters when read on 2026-11-09.
- GRM Information Management, Medical Records Custodian Services page, read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 4,672 characters when read on 2026-11-09.
- GRM Information Management, Medical Records Custodian Services page, read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 4,672 characters when read on 2026-11-09.
- GRM Information Management, Medical Records Custodian Services page, read 2026-11-09, Export at exit: No answer on the document, which ran to 4,672 characters when read on 2026-11-09.
- GRM Information Management, Privacy statement, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 11,358 characters when read on 2026-11-09.
- GRM Information Management, Privacy statement, read 2026-11-09, Vendor keeps aggregated or anonymised use:
We use cookies and similar technology to collect aggregate information about site usage by all of our visitors
- GRM Information Management, Privacy statement, read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 11,358 characters when read on 2026-11-09.
- GRM Information Management, Privacy statement, read 2026-11-09, Export at exit: No answer on the document, which ran to 11,358 characters when read on 2026-11-09.
- Harmony Healthcare IT, Privacy Policy, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 16,886 characters when read on 2026-11-09.
- Harmony Healthcare IT, Privacy Policy, read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 16,886 characters when read on 2026-11-09.
- Harmony Healthcare IT, Privacy Policy, read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 16,886 characters when read on 2026-11-09.
- Harmony Healthcare IT, Privacy Policy, read 2026-11-09, Export at exit: No answer on the document, which ran to 16,886 characters when read on 2026-11-09.
- Mediportal, Privacy Policy, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 9,406 characters when read on 2026-11-09.
- Mediportal, Privacy Policy, read 2026-11-09, Vendor keeps aggregated or anonymised use:
To provide third parties with statistical information about the users of our website.
- Mediportal, Privacy Policy, read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 9,406 characters when read on 2026-11-09.
- Mediportal, Privacy Policy, read 2026-11-09, Export at exit: No answer on the document, which ran to 9,406 characters when read on 2026-11-09.
- MediQuant, Privacy Policy, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 11,001 characters when read on 2026-11-09.
- MediQuant, Privacy Policy, read 2026-11-09, Vendor keeps aggregated or anonymised use:
We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.
- MediQuant, Privacy Policy, read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 11,001 characters when read on 2026-11-09.
- MediQuant, Privacy Policy, read 2026-11-09, Export at exit: No answer on the document, which ran to 11,001 characters when read on 2026-11-09.
- MRO, Privacy policy, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 8,419 characters when read on 2026-11-09.
- MRO, Privacy policy, read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 8,419 characters when read on 2026-11-09.
- MRO, Privacy policy, read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 8,419 characters when read on 2026-11-09.
- MRO, Privacy policy, read 2026-11-09, Export at exit: No answer on the document, which ran to 8,419 characters when read on 2026-11-09.
- RLDatix (Galen), Company Policies, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 77,855 characters when read on 2026-11-09.
- RLDatix (Galen), Company Policies, read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 77,855 characters when read on 2026-11-09.
- RLDatix (Galen), Company Policies, read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 77,855 characters when read on 2026-11-09.
- RLDatix (Galen), Company Policies, read 2026-11-09, Export at exit: No answer on the document, which ran to 77,855 characters when read on 2026-11-09.
- Secure Records Solutions, Closing Medical Practice page, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 5,892 characters when read on 2026-11-09.
- Secure Records Solutions, Closing Medical Practice page, read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 5,892 characters when read on 2026-11-09.
- Secure Records Solutions, Closing Medical Practice page, read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 5,892 characters when read on 2026-11-09.
- Secure Records Solutions, Closing Medical Practice page, read 2026-11-09, Export at exit: No answer on the document, which ran to 5,892 characters when read on 2026-11-09.
- Verisma, Privacy Policy, read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 8,953 characters when read on 2026-11-09.
- Verisma, Privacy Policy, read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 8,953 characters when read on 2026-11-09.
- Verisma, Privacy Policy, read 2026-11-09, Training AI on the business's data:
All AI processing occurs within Microsoft Azure’s HIPAA-compliant cloud infrastructure, and no Protected Health Information is used to train AI models.
- Verisma, Privacy Policy, read 2026-11-09, Export at exit: No answer on the document, which ran to 8,953 characters when read on 2026-11-09.
Documents we read but did not count
1 named document was read and left out because it is not what this board covers; the reason is below. It is counted, never answered.
- Privacy Notice | Iron Mountain United States: the stored read is Iron Mountain's cookie consent banner, 1,804 characters, with no policy text
How the figures are worked out
Each vendor's own published terms were read through estate-fetch and stored whole (sha256 on every row).
For every document, four questions were answered from the vendor's own words: who owns the business's data, vendor keeps aggregated or anonymised use, training AI on the business's data, export at exit.
Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the document read does not address the question.
A vendor with several documents reads 'varies' where they disagree.
13 vendors, 14 documents.
All 15 sources
- Privacy Policy (quoted for comment from the vendor's own published terms)
- Privacy Policy - MediQuant (quoted for comment from the vendor's own published terms)
- Company Policies | RLDatix (quoted for comment from the vendor's own published terms)
- Terms of Use & Privacy Policy | Access (quoted for comment from the vendor's own published terms)
- Privacy & Cookies Policy – BridgeHead Software (quoted for comment from the vendor's own published terms)
- Privacy Policy | Flatirons Solutions (quoted for comment from the vendor's own published terms)
- Privacy Policy - DocStar (quoted for comment from the vendor's own published terms)
- Privacy Policy - Mediportal (quoted for comment from the vendor's own published terms)
- Privacy Notice | Iron Mountain United States (read, set aside)
- Privacy | GRM Information Management Solutions (quoted for comment from the vendor's own published terms)
- Medical Records Custodian Services - GRM Information Management (quoted for comment from the vendor's own published terms)
- Records Custodianship Cost Calculator - ChartRequest (quoted for comment from the vendor's own published terms)
- Medical Records Custodian | Secure Records Solutions (quoted for comment from the vendor's own published terms)
- Privacy policy for how we handle your information | MRO (quoted for comment from the vendor's own published terms)
- Privacy Policy | Verisma (quoted for comment from the vendor's own published terms)
Reference or embed these figures
6 of 13 health records archive software vendors whose terms we read reserve the right to use their customers' data in aggregated or anonymised form, read 9 November 2026.
Who owns the business's data, by vendor: not stated 13 of 13 (health records archive software terms, read 9 November 2026).
Vendor keeps aggregated or anonymised use, by vendor: not stated 7 of 13, reserved 6 of 13 (health records archive software terms, read 9 November 2026).
Training AI on the business's data, by vendor: not stated 12 of 13, will not train 1 of 13 (health records archive software terms, read 9 November 2026).
Export at exit, by vendor: not stated 13 of 13 (health records archive software terms, read 9 November 2026).
Suggested citation: "Health records archive software data terms", updated 2026-11-09, https://sellmedicalrecordstoai.com/datasets/health-records-archive-software-data-terms/.
CSV download (56 answers, worked out 2026-11-09)
Questions this data answers
What do the archive, custodian and release-of-information services that hold old medical records say in their own documents about who owns the records, their own use of them, AI training and return at the end of the contract?
6 of 13 health records archive software vendors whose terms we read reserve the right to use their customers' data in aggregated or anonymised form, read 9 November 2026.