1. Introduction

Cendri Health LLC ("Cendri Health," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at cendrihealth.com (the "Site") or interact with our clinical intelligence platform (the "Platform"). Please read this policy carefully. If you do not agree with its terms, please discontinue use of the Site.

2. Information We Collect

We may collect the following categories of information:

• Contact Information: Name, email address, phone number, and organization when you submit a contact form or request a demo.
• Usage Data: Pages visited, time spent, browser type, IP address, and referring URLs collected automatically via standard web analytics.
• Communications: Content of messages you send us via contact forms or email.
• Protected Health Information (PHI): If you are a covered entity or business associate using the Cendri Health Platform under a signed Business Associate Agreement (BAA), PHI is governed by HIPAA and your contractual agreements with us — not this public-facing privacy policy.

3. How We Use Your Information

• To respond to inquiries and provide requested information
• To communicate updates about our platform, clinical pilot program, or company news
• To improve our website and services
• To comply with legal obligations
• To detect and prevent fraudulent or unauthorized activity

4. HIPAA Compliance

Cendri Health LLC is designed and operated in alignment with the Health Insurance Portability and Accountability Act (HIPAA). We maintain a signed Business Associate Agreement (BAA) with our cloud infrastructure provider (AWS). Any PHI processed through the Platform is subject to our HIPAA policies, BAA terms, and applicable federal and state law — including 42 CFR Part 2 protections for substance use disorder records. We do not sell, rent, or commercially exploit PHI under any circumstances.

5. Sharing of Information

We do not sell your personal information. We may share information only in the following limited circumstances:

• Service Providers: Trusted vendors who assist us in operating our website or platform, bound by confidentiality agreements. A current list of subprocessors is maintained at cendri.health/subprocessors.
• Legal Requirements: When required by law, subpoena, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality protections.

6. Data Security

We implement industry-standard administrative, technical, and physical safeguards to protect your information. The Cendri Health Platform is hosted on AWS with encryption at rest and in transit. We have completed a third-party HIPAA Security Risk Assessment and an independent NIST-mapped web application penetration test (Qualysec, April 2026), with all findings closed at retest. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Cookies and Tracking

Our Site may use cookies and similar tracking technologies to enhance user experience and gather analytics. You may adjust your browser settings to decline cookies, though some features of the Site may not function properly as a result.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal information. To exercise any of these rights, contact us at info@cendrihealth.com.

9. Children's Privacy

Our Site is not directed to individuals under 18, and we do not knowingly collect personal information from children through it. Where a covered entity uses the Platform to treat minors, that information is Protected Health Information governed by HIPAA, 42 CFR Part 2 where applicable, and the Business Associate Agreement between us — not by this policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date above. Continued use of the Site after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: