Privacy & Security
This page is maintained by CohesiveFIN to answer common privacy and security questions about our website and platform. It describes our practices; it is not an independent certification.
Through this website we collect only what you provide: your name, work email, organization and any message or demo request details you submit. We do not sell this information, and we use it solely to respond to your inquiry and prepare a relevant conversation.
CohesiveFIN follows a minimum-necessary approach: we process the least patient and account information required to complete the workflow. Records that document batches, decisions and submissions are retained as agreed operating records for the engagement, and are not used beyond it.
Our data handling practices and access controls are designed with HIPAA expectations in mind. Payment-card data is out of scope for the current release. A business associate agreement and related prerequisites are addressed before any production patient information is processed. Compliance responsibilities are shared: CohesiveFIN maintains platform controls, and each client organization maintains its own policies and configurations.
Access to client information is limited to personnel who need it for a specific engagement, and within the platform access is scoped by tenant and provider client. Data is encrypted in transit, access is authenticated and logged, and only the minimum data required to operate the workflow is processed.
This website uses only the cookies required to serve pages reliably. We do not use advertising trackers or sell behavioral data to third parties.
You may request a copy of the information you have submitted, ask that it be corrected, or ask that it be deleted. Contact us and we will respond promptly.
For privacy requests, security review documentation, or questions about this page, reach us at annt@covalentrg.com.