Effective Date: January 1, 2026 • Version 2026.4
STATUTORY PRIVACY & DATA PROTECTION POLICY 45 CFR § 164.514(b)(2) Safe HarborHIPAA / HITECH & CCPA / CPRA Aligned

ViacoraMed Privacy PolicyClinical Data Protection Governance

This Privacy Policy governs how Dayyani Solutions LLC (“ViacoraMed,” “we,” “us,” or “our”) collects, processes, de-identifies, and safeguards information across the ViacoraMed Autonomous Medical Coding, Clinical Documentation Integrity (CDI), and Direct EHR Integration platform.

PHI De-Identification18 Safe Harbor Identifiers Scrubbed in RAM
AI Model Training Policy0% Training on Patient or Client Data
Cryptographic StandardTLS 1.3 In Transit • AES-256-GCM At Rest
1. Data Controller, HIPAA Business Associate & Corporate Identity

Statutory Corporate Authority & Global Engineering Presence

When providing autonomous medical coding, CDI auditing, and EHR integration services to healthcare providers, clinics, and hospital systems (“Covered Entities”), ViacoraMed operates strictly as a HIPAA Business Associate under 45 CFR § 160.103. For public website visitors and prospective enterprise inquiries, ViacoraMed operates as the Data Controller:

US Corporate Headquarters & BAA Authority
Entity: Dayyani Solutions LLC
CA SOS Entity No.: 202106810592 • EIN: 92-0510014
Address: 1706 Carol Lee Ln, Escondido, CA 92026, USA
HIPAA Security Officer: Basel Dayyani — CTO & HIPAA Security Officer
Dayyani Ai Solutions & Privacy Contact
R&D Presence: Basel, Switzerland
Compliance Alignment: US HIPAA/HITECH, CCPA/CPRA, EU GDPR
Privacy & Security Desk: contact@viacora.ai
US Direct: +1 864 320 5906 • CH: +41 76 607 2185
2. Zero-Trust PHI De-Identification & HIPAA Safe Harbor (45 CFR § 164.514)

In-Memory RAM Scrubbing of All 18 Statutory PHI Identifiers

Before any uploaded clinical chart PDF or incoming EHR Integration stream (`HL7 FHIR R4`, `HL7 v2.5`, or `C-CDA`) is evaluated by ViacoraMed's 24 AI Specialist Agents, our deterministic Layer 02 HIPAA Safe Harbor Scrubbing Engine strips all 18 statutory Protected Health Information (PHI) identifiers strictly within volatile RAM:

Patient & Relative Full Names
Medical Record Numbers (MRNs)
Social Security Numbers (SSNs)
Geographic Subdivisions Smaller Than State
Dates Directly Related to an Individual
Telephone & Facsimile Numbers
Electronic Mail Addresses
Health Plan Beneficiary Numbers
Account & Certificate/License Numbers
Vehicle & Medical Device Serial Identifiers
Web URLs & IP Address Identifiers
Biometric & Full-Face Photographic Images
3. Zero AI Model Training & Strict Multi-Tenant Data Isolation

Your Clinical Records Never Train External or Shared AI Models

ViacoraMed enforces an absolute Zero-Training Invariant: clinical encounter charts, laboratory results, physician SOAP narratives, and billing ledgers ingested from a Covered Entity are never used to train, fine-tune, or update public, third-party, or cross-tenant language models. Each healthcare organization's records are isolated within dedicated PostgreSQL tenant scopes (`organizationId`) and processed through our zero-retention enterprise AI gateway.

4. Enterprise Contact Inquiries, Active Cyber-Defense & Zero Email Reflection

How We Handle Executive Demo Requests & Security Telemetry

When you submit an inquiry via our /contact portal or Request Demo modal, we collect only the professional contact details you provide (Name, Organization, Work Email, Phone, and Inquiry Scope) together with request security telemetry (client IP address and submission timing) to protect our clinical infrastructure:

  • Zero Visitor Email Reflection Policy: To eliminate SMTP backscatter and CWE-640 email reflection vectors, ViacoraMed never dispatches automated confirmation emails to unverified visitor-submitted addresses. All legitimate inquiries are routed exclusively to our internal clinical advisory team (`contact@viacora.ai`).
  • No Sale or Commercial Sharing: We never sell, rent, or trade visitor or clinician contact information to third-party data brokers or advertisers.
5. Statutory Privacy Rights (HIPAA, CCPA/CPRA & International Governance)

Data Access, Deletion, Audit Trail Inspection & Contact

Covered Entities retain full ownership and administrative control over their ingested clinical encounter repositories, including instant batch purge controls and downloadable SHA-256 cryptographic audit logs. Individuals and enterprise representatives may exercise their right to access, correct, or request deletion of business contact records at any time by contacting contact@viacora.ai.

Questions regarding our privacy safeguards or need to execute a Master HIPAA Business Associate Agreement?