# Health records archive software data terms

> 6 of 13 health records archive software vendors whose terms we read reserve the right to use their customers' data in aggregated or anonymised form, read 9 November 2026.

Sell Medical Records to AI · https://sellmedicalrecordstoai.com/datasets/health-records-archive-software-data-terms/ · computed 2026-11-09

**Vendors whose terms reserve aggregated or anonymised use:** 6 of 13 vendors (14 documents read; 15 named).

## The answers, question by question

- **Who owns the business's data:** not stated 13
- **Vendor keeps aggregated or anonymised use:** not stated 7, reserved 6
- **Training AI on the business's data:** not stated 12, will not train 1
- **Export at exit:** not stated 13

## Every vendor

| Vendor | Who owns the business's data | Vendor keeps aggregated or anonymised use | Training AI on the business's data | Export at exit |
|---|---|---|---|---|
| Access (Triyam) | not stated | not stated | not stated | not stated |
| BridgeHead Software | not stated | reserved | not stated | not stated |
| ChartRequest | not stated | not stated | not stated | not stated |
| DocStar (Epicor) | not stated | reserved | not stated | not stated |
| Flatirons Solutions | not stated | reserved | not stated | not stated |
| GRM Information Management | not stated | reserved | not stated | not stated |
| Harmony Healthcare IT | not stated | not stated | not stated | not stated |
| Mediportal | not stated | reserved | not stated | not stated |
| MediQuant | not stated | reserved | not stated | not stated |
| MRO | not stated | not stated | not stated | not stated |
| RLDatix (Galen) | not stated | not stated | not stated | not stated |
| Secure Records Solutions | not stated | not stated | not stated | not stated |
| Verisma | not stated | not stated | will not train | not stated |

## The sentence each answer rests on (56)

- Access (Triyam), [Terms of Use and Privacy Policy](https://www.accesscorp.com/terms-of-use/), read 2026-10-28, Who owns the business's data: No answer on the document, which ran to 46,279 characters when read on 2026-10-28.
- Access (Triyam), [Terms of Use and Privacy Policy](https://www.accesscorp.com/terms-of-use/), read 2026-10-28, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 46,279 characters when read on 2026-10-28.
- Access (Triyam), [Terms of Use and Privacy Policy](https://www.accesscorp.com/terms-of-use/), read 2026-10-28, Training AI on the business's data: No answer on the document, which ran to 46,279 characters when read on 2026-10-28.
- Access (Triyam), [Terms of Use and Privacy Policy](https://www.accesscorp.com/terms-of-use/), read 2026-10-28, Export at exit: No answer on the document, which ran to 46,279 characters when read on 2026-10-28.
- BridgeHead Software, [Privacy and Cookies Policy](https://www.bridgeheadsoftware.com/privacy-policy/), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 17,158 characters when read on 2026-11-09.
- BridgeHead Software, [Privacy and Cookies Policy](https://www.bridgeheadsoftware.com/privacy-policy/), read 2026-11-09, Vendor keeps aggregated or anonymised use: "for systems administration and to report aggregate information to third parties affiliates"
- BridgeHead Software, [Privacy and Cookies Policy](https://www.bridgeheadsoftware.com/privacy-policy/), read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 17,158 characters when read on 2026-11-09.
- BridgeHead Software, [Privacy and Cookies Policy](https://www.bridgeheadsoftware.com/privacy-policy/), read 2026-11-09, Export at exit: No answer on the document, which ran to 17,158 characters when read on 2026-11-09.
- ChartRequest, [Custodianship page](https://chartrequest.com/provider-solutions/chartrequest-custodianship), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 4,219 characters when read on 2026-11-09.
- ChartRequest, [Custodianship page](https://chartrequest.com/provider-solutions/chartrequest-custodianship), read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 4,219 characters when read on 2026-11-09.
- ChartRequest, [Custodianship page](https://chartrequest.com/provider-solutions/chartrequest-custodianship), read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 4,219 characters when read on 2026-11-09.
- ChartRequest, [Custodianship page](https://chartrequest.com/provider-solutions/chartrequest-custodianship), read 2026-11-09, Export at exit: No answer on the document, which ran to 4,219 characters when read on 2026-11-09.
- DocStar (Epicor), [Privacy Policy](https://www.docstar.com/privacy-policy), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 33,423 characters when read on 2026-11-09.
- DocStar (Epicor), [Privacy Policy](https://www.docstar.com/privacy-policy), read 2026-11-09, Vendor keeps aggregated or anonymised use: "we may pseudonymize and/or anonymise your Personal Data for business purposes including to improve our products and services, in which case we may use such information without further notice to you"
- DocStar (Epicor), [Privacy Policy](https://www.docstar.com/privacy-policy), read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 33,423 characters when read on 2026-11-09.
- DocStar (Epicor), [Privacy Policy](https://www.docstar.com/privacy-policy), read 2026-11-09, Export at exit: No answer on the document, which ran to 33,423 characters when read on 2026-11-09.
- Flatirons Solutions, [Privacy Policy](https://flatironssolutions.com/privacy-policy/), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 51,791 characters when read on 2026-11-09.
- Flatirons Solutions, [Privacy Policy](https://flatironssolutions.com/privacy-policy/), read 2026-11-09, Vendor keeps aggregated or anonymised use: "We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments"
- Flatirons Solutions, [Privacy Policy](https://flatironssolutions.com/privacy-policy/), read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 51,791 characters when read on 2026-11-09.
- Flatirons Solutions, [Privacy Policy](https://flatironssolutions.com/privacy-policy/), read 2026-11-09, Export at exit: No answer on the document, which ran to 51,791 characters when read on 2026-11-09.
- GRM Information Management, [Medical Records Custodian Services page](https://www.grmdocumentmanagement.com/healthcare/medical-records-custodian-services/), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 4,672 characters when read on 2026-11-09.
- GRM Information Management, [Medical Records Custodian Services page](https://www.grmdocumentmanagement.com/healthcare/medical-records-custodian-services/), read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 4,672 characters when read on 2026-11-09.
- GRM Information Management, [Medical Records Custodian Services page](https://www.grmdocumentmanagement.com/healthcare/medical-records-custodian-services/), read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 4,672 characters when read on 2026-11-09.
- GRM Information Management, [Medical Records Custodian Services page](https://www.grmdocumentmanagement.com/healthcare/medical-records-custodian-services/), read 2026-11-09, Export at exit: No answer on the document, which ran to 4,672 characters when read on 2026-11-09.
- GRM Information Management, [Privacy statement](https://www.grmdocumentmanagement.com/privacy-policy/), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 11,358 characters when read on 2026-11-09.
- GRM Information Management, [Privacy statement](https://www.grmdocumentmanagement.com/privacy-policy/), read 2026-11-09, Vendor keeps aggregated or anonymised use: "We use cookies and similar technology to collect aggregate information about site usage by all of our visitors"
- GRM Information Management, [Privacy statement](https://www.grmdocumentmanagement.com/privacy-policy/), read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 11,358 characters when read on 2026-11-09.
- GRM Information Management, [Privacy statement](https://www.grmdocumentmanagement.com/privacy-policy/), read 2026-11-09, Export at exit: No answer on the document, which ran to 11,358 characters when read on 2026-11-09.
- Harmony Healthcare IT, [Privacy Policy](https://www.harmonyhit.com/privacy), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 16,886 characters when read on 2026-11-09.
- Harmony Healthcare IT, [Privacy Policy](https://www.harmonyhit.com/privacy), read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 16,886 characters when read on 2026-11-09.
- Harmony Healthcare IT, [Privacy Policy](https://www.harmonyhit.com/privacy), read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 16,886 characters when read on 2026-11-09.
- Harmony Healthcare IT, [Privacy Policy](https://www.harmonyhit.com/privacy), read 2026-11-09, Export at exit: No answer on the document, which ran to 16,886 characters when read on 2026-11-09.
- Mediportal, [Privacy Policy](https://www.mediportal.com/privacy-policy), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 9,406 characters when read on 2026-11-09.
- Mediportal, [Privacy Policy](https://www.mediportal.com/privacy-policy), read 2026-11-09, Vendor keeps aggregated or anonymised use: "To provide third parties with statistical information about the users of our website."
- Mediportal, [Privacy Policy](https://www.mediportal.com/privacy-policy), read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 9,406 characters when read on 2026-11-09.
- Mediportal, [Privacy Policy](https://www.mediportal.com/privacy-policy), read 2026-11-09, Export at exit: No answer on the document, which ran to 9,406 characters when read on 2026-11-09.
- MediQuant, [Privacy Policy](https://www.mediquant.com/privacy-policy/), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 11,001 characters when read on 2026-11-09.
- MediQuant, [Privacy Policy](https://www.mediquant.com/privacy-policy/), read 2026-11-09, Vendor keeps aggregated or anonymised use: "We may disclose aggregated information about our users, and information that does not identify any individual, without restriction."
- MediQuant, [Privacy Policy](https://www.mediquant.com/privacy-policy/), read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 11,001 characters when read on 2026-11-09.
- MediQuant, [Privacy Policy](https://www.mediquant.com/privacy-policy/), read 2026-11-09, Export at exit: No answer on the document, which ran to 11,001 characters when read on 2026-11-09.
- MRO, [Privacy policy](https://mrocorp.com/privacy-policy/), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 8,419 characters when read on 2026-11-09.
- MRO, [Privacy policy](https://mrocorp.com/privacy-policy/), read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 8,419 characters when read on 2026-11-09.
- MRO, [Privacy policy](https://mrocorp.com/privacy-policy/), read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 8,419 characters when read on 2026-11-09.
- MRO, [Privacy policy](https://mrocorp.com/privacy-policy/), read 2026-11-09, Export at exit: No answer on the document, which ran to 8,419 characters when read on 2026-11-09.
- RLDatix (Galen), [Company Policies](https://www.rldatix.com/en-nam/privacy-policy/), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 77,855 characters when read on 2026-11-09.
- RLDatix (Galen), [Company Policies](https://www.rldatix.com/en-nam/privacy-policy/), read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 77,855 characters when read on 2026-11-09.
- RLDatix (Galen), [Company Policies](https://www.rldatix.com/en-nam/privacy-policy/), read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 77,855 characters when read on 2026-11-09.
- RLDatix (Galen), [Company Policies](https://www.rldatix.com/en-nam/privacy-policy/), read 2026-11-09, Export at exit: No answer on the document, which ran to 77,855 characters when read on 2026-11-09.
- Secure Records Solutions, [Closing Medical Practice page](https://securerecordssolutions.com/closing-medical-practice/), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 5,892 characters when read on 2026-11-09.
- Secure Records Solutions, [Closing Medical Practice page](https://securerecordssolutions.com/closing-medical-practice/), read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 5,892 characters when read on 2026-11-09.
- Secure Records Solutions, [Closing Medical Practice page](https://securerecordssolutions.com/closing-medical-practice/), read 2026-11-09, Training AI on the business's data: No answer on the document, which ran to 5,892 characters when read on 2026-11-09.
- Secure Records Solutions, [Closing Medical Practice page](https://securerecordssolutions.com/closing-medical-practice/), read 2026-11-09, Export at exit: No answer on the document, which ran to 5,892 characters when read on 2026-11-09.
- Verisma, [Privacy Policy](https://verisma.com/privacy-policy/), read 2026-11-09, Who owns the business's data: No answer on the document, which ran to 8,953 characters when read on 2026-11-09.
- Verisma, [Privacy Policy](https://verisma.com/privacy-policy/), read 2026-11-09, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 8,953 characters when read on 2026-11-09.
- Verisma, [Privacy Policy](https://verisma.com/privacy-policy/), read 2026-11-09, Training AI on the business's data: "All AI processing occurs within Microsoft Azure’s HIPAA-compliant cloud infrastructure, and no Protected Health Information is used to train AI models."
- Verisma, [Privacy Policy](https://verisma.com/privacy-policy/), read 2026-11-09, Export at exit: No answer on the document, which ran to 8,953 characters when read on 2026-11-09.

## Read and set aside

- [Privacy Notice \| Iron Mountain United States](https://www.ironmountain.com/utility/legal/privacy-policy): the stored read is Iron Mountain's cookie consent banner, 1,804 characters, with no policy text

## Methodology

Each vendor's own published terms were read through estate-fetch and stored whole (sha256 on every row). For every document, four questions were answered from the vendor's own words: who owns the business's data, vendor keeps aggregated or anonymised use, training AI on the business's data, export at exit. Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the document read does not address the question. A vendor with several documents reads 'varies' where they disagree. 13 vendors, 14 documents.

## Sources

- [Privacy Policy](https://www.harmonyhit.com/privacy) (read)
- [Privacy Policy - MediQuant](https://www.mediquant.com/privacy-policy/) (read)
- [Company Policies \| RLDatix](https://www.rldatix.com/en-nam/privacy-policy/) (read)
- [Terms of Use & Privacy Policy \| Access](https://www.accesscorp.com/terms-of-use/) (read)
- [Privacy & Cookies Policy – BridgeHead Software](https://www.bridgeheadsoftware.com/privacy-policy/) (read)
- [Privacy Policy \| Flatirons Solutions](https://flatironssolutions.com/privacy-policy/) (read)
- [Privacy Policy - DocStar](https://www.docstar.com/privacy-policy) (read)
- [Privacy Policy - Mediportal](https://www.mediportal.com/privacy-policy) (read)
- [Privacy Notice \| Iron Mountain United States](https://www.ironmountain.com/utility/legal/privacy-policy) (not-terms)
- [Privacy \| GRM Information Management Solutions](https://www.grmdocumentmanagement.com/privacy-policy/) (read)
- [Medical Records Custodian Services - GRM Information Management](https://www.grmdocumentmanagement.com/healthcare/medical-records-custodian-services/) (read)
- [Records Custodianship Cost Calculator - ChartRequest](https://chartrequest.com/provider-solutions/chartrequest-custodianship) (read)
- [Medical Records Custodian \| Secure Records Solutions](https://securerecordssolutions.com/closing-medical-practice/) (read)
- [Privacy policy for how we handle your information \| MRO](https://mrocorp.com/privacy-policy/) (read)
- [Privacy Policy \| Verisma](https://verisma.com/privacy-policy/) (read)

## Cite or embed

- 6 of 13 health records archive software vendors whose terms we read reserve the right to use their customers' data in aggregated or anonymised form, read 9 November 2026.
- Who owns the business's data, by vendor: not stated 13 of 13 (health records archive software terms, read 9 November 2026).
- Vendor keeps aggregated or anonymised use, by vendor: not stated 7 of 13, reserved 6 of 13 (health records archive software terms, read 9 November 2026).
- Training AI on the business's data, by vendor: not stated 12 of 13, will not train 1 of 13 (health records archive software terms, read 9 November 2026).
- Export at exit, by vendor: not stated 13 of 13 (health records archive software terms, read 9 November 2026).

Cite as: "Health records archive software data terms", updated 2026-11-09, https://sellmedicalrecordstoai.com/datasets/health-records-archive-software-data-terms/.

CSV: https://sellmedicalrecordstoai.com/datasets/health-records-archive-software-data-terms.csv
JSON: https://sellmedicalrecordstoai.com/datasets/health-records-archive-software-data-terms.json
Embed (plain HTML, static link back): see https://sellmedicalrecordstoai.com/datasets/health-records-archive-software-data-terms/#lead