Workflow & Automation · avelishealth.comAvelis Health
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: subprocessors data sharing
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Prohibits the sale or rental of Personal Information, and restricts sharing to enumerated circumstances; permits sharing with third-party vendors and contractors bound by confidentiality obligations — the prohibition on sale/rent is user-favorable.
Establishes a data retention obligation requiring the company to retain Personal Information only as long as necessary for the stated purposes or legal obligations, and to securely delete or anonymize it when no longer needed.
Discloses that online data partners or vendors use cookies and similar technologies to associate site activities with personal information held by those third parties, including email association, and that communications may be sent to those email addresses; also discloses an opt-out mechanism at a specified URL.
How to read this page: Overall risk rates what Avelis Health's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 29 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 29 citationsLast captured 2026-07-19
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Discloses that in a merger, acquisition, or asset sale Personal Information may be transferred to the relevant third party under terms that protect user privacy.
" Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the relevant third party under terms that protect your privacy."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" We do not sell or rent your Personal Information. We may share your information under the following circumstances: Service Providers: With third-party vendors and contractors who assist in the operation and improvement of our Services, provided that they are bound by confidentiality obligations."
Prohibits the sale or rental of Personal Information, and restricts sharing to enumerated circumstances; permits sharing with third-party vendors and contractors bound by confidentiality obligations — the prohibition on sale/rent is user-favorable.
AI-generated interpretation, not legal advice.
" We retain your Personal Information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, to comply with legal obligations, or as otherwise permitted by law. When your information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies."
Establishes a data retention obligation requiring the company to retain Personal Information only as long as necessary for the stated purposes or legal obligations, and to securely delete or anonymize it when no longer needed.
AI-generated interpretation, not legal advice.
" Cookies and Similar Technologies: When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout ."
Discloses that online data partners or vendors use cookies and similar technologies to associate site activities with personal information held by those third parties, including email association, and that communications may be sent to those email addresses; also discloses an opt-out mechanism at a specified URL.
AI-generated interpretation, not legal advice.
" Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the relevant third party under terms that protect your privacy."
Discloses that in a merger, acquisition, or asset sale Personal Information may be transferred to the relevant third party under terms that protect user privacy.
AI-generated interpretation, not legal advice.
" Payment information – cardholder name, last four digits, expiration date, and billing address."
Defines the specific payment data elements collected (cardholder name, last four digits, expiration date, billing address), limiting the scope of financial information retained.
AI-generated interpretation, not legal advice.
" Usage Data: We automatically collect information regarding your use of our Services, such as device type, browser type, IP address, access times, and pages viewed."
Defines the category of usage data automatically collected (device type, browser type, IP address, access times, pages viewed), establishing the scope of passive data collection.
AI-generated interpretation, not legal advice.
" Technical Data: Information about your device and operating system is collected to ensure proper delivery and operation of our Services."
Defines the category of technical data automatically collected about device and operating system, stating the purpose as ensuring proper delivery and operation of Services.
AI-generated interpretation, not legal advice.
" Data Analysis and Research: To analyze user behavior and improve the functionality, performance, and security of our Services."
Grants permission to use Personal Information for data analysis and research to improve functionality, performance, and security of the Services.
AI-generated interpretation, not legal advice.
" Compliance: To comply with applicable laws and regulations, including those governing the protection of health information, such as HIPAA."
Imposes an obligation on the company to use Personal Information to comply with applicable laws and regulations governing the protection of health information, including HIPAA (named verbatim in the clause).
AI-generated interpretation, not legal advice.
" Incident Response: In the event of a data breach involving unsecured PHI, we will notify affected individuals and relevant authorities as required by law."
Imposes an obligation to notify affected individuals and relevant authorities in the event of a data breach involving unsecured PHI, as required by law.
AI-generated interpretation, not legal advice.
" This Privacy Policy explains how Avelis, Inc. ("Avelis", "we", "us", or "our") collects, uses, stores, and protects personal and medical billing information ("Personal Information") when you engage with our services. This Privacy Policy applies to our websites, the Avelis platform, and any related services, including our medical bill review and negotiation services ("Services"). By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy."
Defines the scope of the Privacy Policy, identifies the covered entity, defines 'Personal Information' and 'Services', and incorporates user agreement to data collection and use terms by continued use of the services.
AI-generated interpretation, not legal advice.
" Account Information: When you create an account or update your profile, we collect information such as your name, email address, contact details, and other identifying information."
Defines the category of account information collected (name, email, contact details, identifying information) when a user creates or updates an account, establishing the scope of personal data collection.
AI-generated interpretation, not legal advice.
" Medical and Billing Information: In connection with our Services, you may provide medical billing data, including details from your medical bills that are necessary for us to review and negotiate charges on your behalf."
Defines the category of medical and billing information collected in connection with the Services, specifying the purpose of collection as reviewing and negotiating charges on the user's behalf.
AI-generated interpretation, not legal advice.
" Communication Information: We collect the contents of your communications with us, including emails, support inquiries, and other correspondence."
Defines the category of communication information collected, including emails, support inquiries, and correspondence, establishing the scope of this data collection practice.
AI-generated interpretation, not legal advice.
" We use your Personal Information for the following purposes: Provision and Improvement of Services: To review, analyze, and negotiate your medical bills, including identifying billing errors and disputing overcharges."
Grants the company permission to use Personal Information to review, analyze, and negotiate medical bills, including identifying billing errors and disputing overcharges on the user's behalf.
AI-generated interpretation, not legal advice.
" Communication: To respond to your inquiries, provide support, and send you service-related communications."
Grants permission to use Personal Information for responding to inquiries, providing support, and sending service-related communications.
AI-generated interpretation, not legal advice.
" Billing and Payment Processing: To process payments for any fee-based features of our Services."
Grants permission to use Personal Information for billing and payment processing in connection with fee-based features of the Services.
AI-generated interpretation, not legal advice.
" Health Information: When handling medical billing data and Protected Health Information (PHI), any disclosure is subject to applicable privacy and security regulations."
Imposes an obligation that any disclosure of medical billing data and Protected Health Information (PHI) is subject to applicable privacy and security regulations, restricting how such sensitive health information may be shared.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Avelis Health's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Avelis Health's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Avelis Health's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Avelis Health requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Avelis Health's published policies yet.
What the policies actually cover
0 topicsNone of Avelis Health's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain your Personal Information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, to comply with legal obligations, or as otherwise permitted by law. When your information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies.”Open source citation
The clause permits sale of personal data or information.
“We do not sell or rent your Personal Information. We may share your information under the following circumstances: Service Providers: With third-party vendors and contractors who assist in the operation and improvement of our Services, provided that they are bound by confidentiality obligations.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“Cookies and Similar Technologies: When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt ou...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We do not sell or rent your Personal Information. We may share your information under the following circumstances: Service Providers: With third-party vendors and contractors who assist in the operation and improvement of our Services, provided that they are bound by confidentiality obligations.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the relevant third party under terms that protect your privacy.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | data retention | conditional | MEDIUM | 1 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 3 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on subprocessors data sharing
“Cookies and Similar Technologies: When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout .”Open timeline citation
Latest stance: sale or sell on subprocessors data sharing
“We do not sell or rent your Personal Information. We may share your information under the following circumstances: Service Providers: With third-party vendors and contractors who assist in the operation and improvement of our Services, provided that they are bound by confidentiality obligations.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We do not sell or rent your Personal Information. We may share your information under the following circumstances: Service Providers: With third-party vendors and contractors who assist in the operation and improvement of our Services, provided that they are bound by confidentiality obligations.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the relevant third party under terms that protect your privacy.”Open timeline citation
Latest stance: indefinite or necessity based on data retention
“We retain your Personal Information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, to comply with legal obligations, or as otherwise permitted by law. When your information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-19· verified 2026-07-19verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
29 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Avelis Health's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Avelis Health's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Avelis Health's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.