Privacy · Security · Responsible AI
How eeRegOS handles information across its websites, accounts, enterprise workspaces, integrations, support interactions and related services.
Effective September 27, 2026 · Last updated September 27, 2026
This Privacy Policy applies to personal information processed through eeRegOS-controlled websites, accounts, editions, modules, copilots, workspaces, APIs, integrations, support interactions, sales communications, events and related services.
It does not necessarily govern third-party websites, independent customer systems or third-party services operating under their own privacy policies.
Depending on the context, E&E Medicals and Consulting Inc. may act as a controller/business for account, website, support, billing, security and operational information, or as a processor/service provider when processing Customer Content on behalf of an enterprise customer.
Where eeRegOS processes information solely for a customer, requests concerning that Customer Content may need to be submitted to the relevant customer/controller.
Information may be used to provide the Services, administer accounts and enterprise workspaces, authenticate users, operate regulatory workflows and integrations, generate AI-assisted outputs, deliver support, maintain security, detect abuse, monitor reliability, improve functionality, manage contracts, communicate service information and comply with applicable law.
Personal information may be disclosed to service providers and subprocessors supporting cloud hosting, security, authentication, communications, analytics, payments, AI infrastructure, document processing and enterprise integrations. Information may also be disclosed to authorized enterprise administrators, professional advisers, legal or regulatory authorities, or in connection with a corporate transaction where permitted by law.
eeRegOS does not intend to sell Customer Content as a business model.
Retention periods may vary based on information category, customer instructions, contract requirements, legal obligations, security requirements, litigation holds and legitimate business needs.
Customer Content may be deleted or returned in accordance with the applicable agreement and configured retention requirements. Backups may persist for a limited period before secure expiration or overwrite.
Information may be processed in the United States and other countries where eeRegOS or its service providers operate. Where required, eeRegOS may use recognized safeguards such as adequacy decisions, Standard Contractual Clauses, approved UK transfer mechanisms or other lawful transfer instruments.
eeRegOS may use strictly necessary, functional, analytics, performance and, where permitted, marketing technologies. Where required, non-essential cookies should not be activated until the appropriate consent is obtained.
Recommended controls: Accept All · Reject Non-Essential · Manage Preferences.
The availability of eeRegOS does not mean every deployment is configured for Protected Health Information. Organizations subject to HIPAA should submit PHI only where the applicable environment has been approved for that purpose, appropriate controls are enabled and any required Business Associate Agreement has been executed.
eeRegOS is a professional regulatory intelligence platform and is not directed to children. We do not knowingly solicit personal information directly from children through ordinary professional eeRegOS accounts.
We may update this Privacy Policy to reflect changes in the Services, technology, integrations, data practices, legal requirements or security practices. Material updates will be identified by revising the “Last Updated” date and by providing additional notice where required.
Trust center
Public-facing summaries can be complemented by controlled enterprise materials for procurement, security review and due diligence.
How eeRegOS collects, uses, shares, retains and protects personal information across websites, accounts, enterprise workspaces and integrations.
Administrative, technical and organizational safeguards designed to protect confidentiality, integrity and availability.
Human-guided regulatory intelligence with transparency, traceability, risk-based controls and appropriate professional review.
Information about cross-border processing and recognized transfer safeguards where applicable.
A framework for disclosing vendors supporting cloud infrastructure, AI, authentication, monitoring, communications and related services.
Access, correction, deletion, portability, restriction, objection and other applicable privacy-rights workflows.
Responsible AI
Customer information may be processed by AI systems where necessary to provide requested functionality. The applicable contract and service configuration should define permitted purposes, training restrictions, confidentiality obligations, retention, deletion and subprocessor controls.
Consequential regulatory conclusions should be reviewed against current authoritative sources before they are relied upon for submissions, compliance decisions or regulated-product activities.
Security overview
These are illustrative controls for enterprise review. Specific implemented controls should be confirmed during review.
Encryption in transit and at rest, secure storage, backup controls, data segregation
Role-based access, least privilege, MFA, session controls, administrator management
Secure SDLC, code review, dependency monitoring, vulnerability management, logging
Cloud security controls, environment separation, monitoring, backups, availability controls
Confidentiality obligations, security training, access reviews and offboarding
Detection, assessment, containment, investigation, recovery, notification and review
Your privacy rights
Rights vary by jurisdiction, relationship and applicable exemptions. Verification may be required before certain requests can be completed.
Request applicable personal information
Correct inaccurate information
Request deletion where applicable
Receive eligible information
Limit certain processing
Object where recognized
Exercise qualifying opt-out rights
Appeal eligible privacy decisions
Where applicable, U.S. state residents may have additional rights relating to access, correction, deletion, qualifying sale or sharing, targeted advertising, sensitive information, profiling and nondiscrimination.
Enterprise review
More sensitive materials should be shared through controlled access.
Controller/processor terms, subprocessors, security, data-subject assistance, deletion, audits and international-transfer terms.
Request information →Controlled access to architecture, security questionnaire responses, penetration-test summaries and other due-diligence materials.
Request information →Responsible-AI framework, model governance, human oversight, traceability and enterprise AI processing terms.
Request information →Contact our team for help with legal, privacy, security, or enterprise documentation.
