How we protect your records
Ouvela is built around one idea: your medical records are private, and the technology should keep them that way. Here is how.
Encrypted and isolated per account
The records you upload are stored encrypted. Each account's records are kept isolated from other accounts' by design.
Processed under a Business Associate Agreement
Records are stored encrypted on Amazon Web Services in a fixed region. When a record is read, processing runs only through covered providers under signed Business Associate Agreements, with zero-retention controls where applicable. Ouvela is built with controls mapped to the HIPAA Security Rule safeguards.
Never used to train AI
The AI that reads your records runs under terms that prohibit using your content to train models. Your records are not a training set.
Never sold, never advertised
We do not sell your information, share it with data brokers, or place advertising trackers on the pages that show your records.
Never over text message
Health details are never sent over WhatsApp or SMS. Those channels carry only a link that opens the app, where access is checked.
You hold the controls
You choose who can see a record through single-use invite links, and you can remove someone's access at any time. You can ask us to delete a record or your whole account; deletion is request-based and handled through our deletion process.
Contact
Questions? Email us at hello@ouvela.com.
Last reviewed June 2026