Confidentiality

Census Health, Inc., operating Census CRM, handles sensitive information on behalf of addiction treatment and behavioral health providers. This statement summarizes how we keep that information confidential. It complements — and does not replace — our Privacy Policy, HIPAA commitment, and any Business Associate Agreement in place with a customer.

Customer Data Belongs to the Customer

Data that a customer stores in Census CRM — including inquiries, contacts, and any Protected Health Information (PHI) — remains the customer's data. We use it to provide, secure, support, and improve the service, as directed by the customer and as permitted by our customer agreements and applicable law. We do not sell customer data, and we do not use PHI for advertising or marketing.

Minimum-Necessary Access

Access to confidential data is limited to what is necessary to deliver the service. Within the platform, role-based access controls restrict what each user can see, and access to and activity involving sensitive records is logged. Our workforce is granted access on a least-privilege basis.

Substance Use Disorder Records (42 CFR Part 2)

Records from substance use disorder treatment programs may carry heightened confidentiality obligations under 42 CFR Part 2 in addition to HIPAA, including limits on redisclosure. Census CRM is built to help programs honor those obligations with access controls, consent tracking, and redisclosure protections. Customers remain responsible for the consents and determinations their own programs are required to make.

Workforce Confidentiality

Our personnel are bound by confidentiality obligations as a condition of their engagement and receive security and privacy awareness guidance appropriate to their role. Confidentiality obligations survive the end of a person's engagement with us.

Subprocessors

Where infrastructure or service providers process data on our behalf, they are bound by written agreements imposing confidentiality and data-protection obligations consistent with our own, and they receive only the data necessary to perform their function. See our security overview for more on how data is protected.