Quote requests authorize only the requested ICHRA services. Census processing and approved AI assistance require a documented purpose, access and retention scope. Do not submit medical records, diagnoses, prescriptions, Social Security numbers or banking information in a general form. Employer permission does not grant access to third-party health records.
Employer permission is not an individual HIPAA authorization and does not grant access to third-party health records. Before sensitive processing, the applicable legal basis, vendor data and matching rights, security controls and signed BAAs where required must be verified. No identifiable health information may be sent to public AI tools or used to train general-purpose models. Approved AI processing must be restricted to the documented purpose, access and retention terms, with human review.
Sensitive processing requires a documented purpose, appropriate authorization, restricted access and human review. Do not send identifiable health information to public AI tools. Cross-client research and unrelated marketing use are not authorized by a quote request.
Cross-client benchmarking, public case studies and external research are not included automatically. They require separate written project approval, contractual rights and documented HIPAA de-identification where applicable. Identifiable research requires its own lawful pathway. No sale of identifiable health data or unrelated marketing use is authorized.
Privacy, security and data handling · Questions or prospective withdrawal of optional permission: brad@ichra.shop / 303-903-2054. Withdrawal does not undo prior lawful processing or required retention. A quote checkbox does not execute a BAA or certify HIPAA compliance.
