Privacy, data handling and research sharing

Review status: draft pending privacy sign-off. This page explains how the software behaves; it is not Alive's legal privacy policy.

• No patient data. Alive is for synthetic and non-sensitive material only. Uploads are screened for credentials and common patient identifiers; suspected hits are quarantined and never sent to an AI provider. Screening is automatic and imperfect, so do not upload real patient records.
• Private by default. Projects belong to your organization. Every database query runs under row-level security for your membership; other organizations cannot see your projects, and sponsors who fund your credits cannot see them either.
• AI processing only with approval. Hosted AI drafting and reviews run only after you approve them. Your own provider key, if you use one, is encrypted and never shown again.
• What is stored. Extracted text only for readable, unflagged sources; your confirmed IntakeSpecs, plans, reviews, WorldSpecs and run exports. Exports are downloadable through links that expire after five minutes.
• Research sharing is off by default. You can opt in at two levels (aggregate metrics, or expanded anonymized traces) and revoke at any time. Revocation stops future use; aggregates already published cannot be withdrawn.
• No training on your work. Alive does not train models on client submissions.