Skip to main content

Data handling and privacy

Verification orders carry sensitive applicant PII. SNH AI treats data protection as a core platform concern. This page covers what data the API stores, how it is protected, and how retention and deletion work.

What PII this API stores

Creating an order (POST /orders) and its associated searches can persist:
  • Applicant identity: first/middle/last name, suffix, and aliases (applicantAlias)
  • SSN (ssn) and date of birth (birthday)
  • Contact details: phone, email
  • Addresses: street lines, city, state, ZIP, country
  • Employer and institution contacts: employer email/phone, institution contact email/phone captured on employment and education history records
  • Business context: proposed position and salary, and other fields submitted with the order
All data is scoped per organization (isolated by tenant claim) and encrypted at rest and in transit.

Retention and deletion

Data retention windows and deletion schedules are defined in your service agreement with SNH AI. These terms are configured per organization and enforced at the platform level. To confirm the retention and deletion terms that apply to your organization, contact support.

Shared responsibility