Transactional storage requirements will vary from client to client. Each client determines their preferences for transaction data storage pending their analytics requirements and privacy policy. By default Sm8 application will remove all incomplete records after 60 days.
SM8 promotes the following data storage principals to its clients;
- 30-day retention from last application modification date so that applications can be completed (days are configurable from 0 days to max of 1000 days)
- Retaining all data and information that will be useful for the analysis of the underwriting rules and purging all and any information that may result in a privacy breach.
- No physical outputs or inputs (such as PDF’s or uploaded supporting documents) are retained in the SM8 application;
- PDF’s are re-generated by SM8 when called in accordance with the underwriting rules (no static PDF’s are retained in the system)
- No ability to uploaded documents to Sm8rtHealth.
- No personal identifiable information is retained or used in processing the health risk. Where this information is called as Custom data, the fields are never stored.
Media disposal
- Media storage and disposal is handled on-site by AWS. No requirement for SM8 to dispose of physical records or media.
- Back-ups are scripted and transferred to AWS remote servers by AWS. This allocation of resource is not visible to the SM8.
