Dec 2025 · ComplianceDraftUS-only for now
Privacy, Confidentiality & Compliance Guide for Researchers
A web-friendly abridged version of our researcher guide. The PDF is the full document you can share with your team.
Overview
This guide explains how Feelpath handles consent and sensitive data for research collaborations. It separates what is true today from what is proposed or planned.
US-only for now. International research support is on the roadmap.
What we do today
- BAAs with core vendors: BAAs are in place with the vendors used to run Feelpath (Zoom, AWS, Kinde, OpenAI).
- Consent at session start: participants choose what to save and what to share at session start (based on the join flow).
- Audit logging: we maintain HIPAA-compliant audit logging for accountability and review.
Proposed study modes (proposal)
- Mode A: clinical / PHI studies (stricter controls and partner-specific governance).
- Mode B: de-identified research datasets (designed to reduce exposure and support research workflows).
How research data works (methods)
- What we collect: session metadata, consent choices, transcripts (when enabled), AI outputs (when enabled).
- When we collect it: consent at session start; transcript during session; insights after session (if enabled).
- How it becomes research data (proposal): study exports with a clear field list (“data dictionary”) and de-identification support when required by a research collaboration.