Privacy
Sanolith treats tenant data as protected clinical data by default. Prompts, uploads, retrieved chunks, and audit events stay scoped to the tenant environment and are not used to train third-party models.
Tenant-scoped
Private data boundary
Audit evidence
- PHI is redacted before model inference and before prompt storage.
- Tenant datasets are isolated and only searched when a user explicitly binds them to a thread.
- Operational telemetry avoids user-entered prompt text, gateway responses, and uploaded source content.
Questions? Email [email protected].
Last updated: 2026-05-06.