> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.theary.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Data handling and privacy

> How SNH AI handles applicant PII: storage scope, encryption, retention, and deletion.

# Data handling and privacy

Verification orders carry sensitive applicant PII. SNH AI treats data protection as a core platform concern. This page covers what data the API stores, how it is protected, and how retention and deletion work.

## What PII this API stores

Creating an order (`POST /orders`) and its associated searches can persist:

* **Applicant identity**: first/middle/last name, suffix, and aliases (`applicantAlias`)
* **SSN** (`ssn`) and date of birth (`birthday`)
* **Contact details**: phone, email
* **Addresses**: street lines, city, state, ZIP, country
* **Employer and institution contacts**: employer email/phone, institution contact email/phone captured on employment and education history records
* **Business context**: proposed position and salary, and other fields submitted with the order

All data is scoped per organization (isolated by `tenant` claim) and encrypted at rest and in transit.

## Retention and deletion

Data retention windows and deletion schedules are defined in your service agreement with SNH AI. These terms are configured per organization and enforced at the platform level.

To confirm the retention and deletion terms that apply to your organization, contact [support](/getting-started/getting-help).

## Shared responsibility

| SNH AI provides                           | You are responsible for                                    |
| ----------------------------------------- | ---------------------------------------------------------- |
| Encryption at rest and in transit         | Obtaining applicant consent before submitting PII          |
| Organization-level data isolation         | Compliance with applicable privacy laws (GDPR, CCPA, etc.) |
| Retention enforcement per your agreement  | Submitting deletion/redaction requests when required       |
| Secure infrastructure and access controls | Protecting credentials and webhook endpoints on your side  |

## Related

* [Getting help](/getting-started/getting-help)
* [Authentication](/getting-started/authentication)
* [Environments](/getting-started/environments)