Version 2026.05.1

Data Retention Disclosure

This disclosure explains the principles ScoliBase uses to retain account, operational, healthcare-related, and audit data, including backup and legal-hold considerations.

Retention Principles

ScoliBase retains information for as long as reasonably necessary for account administration, care coordination, security, audit, backup, compliance, dispute resolution, and legal obligations.

Categories

Retention may vary by record type, including account records, PHI, support records, messaging records, backups, and audit logs.

Deletion and Backups

Where deletion is permitted, data may still persist temporarily in backup systems, operational replicas, or legal-hold contexts until the relevant retention cycle ends.

Legal Hold Exceptions

Data may be retained longer than normal schedules when reasonably necessary for investigations, litigation holds, regulatory matters, or comparable legal obligations.