Docus
Docus · Chat assistant · US · docus.ai
services/docus.yamlVendor data-handling terms
The policy states HIPAA compliance for identifiable health information but does not say whether conversations or uploaded records train models.
“To provide, analyze and improve the Services. / We may use feedback you provide to improve the Services and the Website.”
“We will only keep your Personal information for as long as it is necessary for the purposes set out in this Privacy Policy unless a longer retention period is required or permitted by applicable law (such as tax, accounting, or other legal requirements).”
The policy references HIPAA and US law but names no hosting region.
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| docus.ai | app | observed |
Assessment
Reasoning: An AI health assistant that takes symptoms and lab reports. The content is special-category health data by definition; training use and region are not stated. Personal use, but on a managed device it is health data leaving the device.
Flags: Health data; training-use not stated · Region not stated · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Use and retention terms verified against the Docus privacy policy; region not stated.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.