Data Security Is Just As Important As Assessment Quality.
Seneca is built for the sensitive nature of autism assessments. Here's exactly how we protect your data.
Five Facts About Seneca
GDPR Compliant
Families keep every right that GDPR gives them and Seneca is held to the same confidentiality you are.
Hosted And Stored In The EU
Our servers and database are both located in Ireland.
Built In Accordance With PSI Guidelines
Seneca was built in accordance with the Psychological Society of Ireland's Professional Practice Guidelines for the Assessment, Formulation, and Diagnosis of Autism in Children and Adolescents (2nd Edition).
Patients' Data Never Trains An AI Model
We have agreements in place that exclude data used on Seneca from model training; additionally, Seneca has not opted into any data-sharing programmes.
The Clinician Is The Author Of Record
No report can be exported without explicit, per-section sign-off.
What's Covered, One Topic At A Time
Scroll through, or jump straight to what you came to check.
How Data Is Protected
Access And Isolation
- Access is enforced in the database, default-deny, not by application checks
- A clinician reaches a case only through membership of that case's team
- Privileged database credentials are server-side only and never used to skip an authorisation check
- Accounts that sign in with a password need two-factor authentication, so a stolen password on its own opens nothing. Accounts that sign in with Google use Google's own sign-in check
Data Protection
- Encryption in transit and at rest
- Database and file storage in Ireland; application compute in Dublin
- Clinical content is kept out of technical logs, error messages and URLs
- Every delete is permanent and audited, and whole-case erasure needs the client's name typed to confirm
- Deletes purge stored files as well as database rows, because file storage is not covered by a database cascade
- One-click export of everything held about a client, for a portability request
Accountability
- An audit entry on every state-changing action: create, edit, view of a sensitive record, export, sign-off and erasure
- The audit trail is append-only at the database privilege level — it cannot be edited or truncated, including by us
- The audit trail is deliberately not erased with a client, so it survives as proof of what was erased, by whom and when
- It carries no clinical content and no assessed person's name, which is what makes keeping it permanently lawful
Application Security
- Untrusted content — uploaded documents, transcripts, model output — is sanitised on write and on render, not on one of the two
- Rate limiting on the expensive and abusable routes
- Uploaded files are checked by type, and the store accepts no audio or video type at all
AI And Your Patients' Data
- Every time the AI writes a draft, we record what it was given, what it wrote and who asked for it. If a report is ever questioned, there is a full record of how it was made.
- The instructions the AI follows are saved as numbered versions and never quietly changed. So we can always tell which instructions produced which draft.
- You sign off each section of the report yourself. Once signed, it is locked until you unlock it.
- The AI is told to base every statement on your case records, and to point out missing information instead of guessing.
- Anything the AI wrote is marked as AI-drafted in the app.
Do The AI Providers Train On My Clients' Data?
No. Our contracts with AI providers exclude all our data from model training, and Seneca is not enrolled in any data-sharing programme.
What About Hallucinations... Can Our Platform Invent Something?
No AI platform is 100% accurate yet, therefore we built Seneca around you catching false statements (if any), rather than around us promising they will not happen.
Three things keep this risk in check:
- Seneca's AI Clinician Notes flags missing data as a gap rather than filling it in.
- Every generated statement highlights the exact source it came from, so double-checking doesn't require detective work.
- Nothing reaches a family without your review, editing and sign-off on every section.
Retention And Your Rights
It is deleted. A session, a document, a report or a whole case: when you delete it, it is deleted permanently, along with any files you uploaded to it. To delete a whole case, for example when a family asks to be forgotten, you type the client's exact name to confirm.
After any delete, we keep a note of when it happened and who did it, as proof it was done. The note holds no clinical details and not the client's name.
Where The Data Physically Sits
Ireland
- The DatabaseEvery case, note and report.
- Uploaded DocumentsSchool reports, letters, previous assessments.
- The Website And AppThe site and the app run on servers in Dublin.
Report drafting and reading scanned documents run on Anthropic, under contract with Anthropic Ireland, Limited. Transcription runs on OpenAI, under contract with OpenAI Ireland Ltd. Both work in the United States.
Before a report is drafted, your client's name and date of birth are swapped for placeholders, so the drafting provider does not see who the report is about. A scanned document is sent as you uploaded it, names included, because the provider has to read the page to get its text out.
Neither provider may use your data to train AI models, and every transfer runs on the European Commission's standard contractual clauses.
Sub-processors
All our sub-processors are listed here, with what each one may keep.
What Clinicians Ask Us First
Is The Session Audio Recorded And Kept?
No. Seneca never stores the recording. The audio goes straight to transcription, and only the text is kept.
Do The AI Providers Train On My Clients' Data?
No. Our contracts with AI providers exclude all our data from model training, and Seneca is not enrolled in any data-sharing programme.
What Happens When I Delete A Case, Or When A Family Asks To Be Forgotten?
It is deleted. A session, a document, a report or a whole case: when you delete it, it is deleted permanently, along with any files you uploaded to it. To delete a whole case, for example when a family asks to be forgotten, you type the client's exact name to confirm.
After any delete, we keep a note of when it happened and who did it, as proof it was done. The note holds no clinical details and not the client's name.
What About Hallucinations... Can Our Platform Invent Something?
No AI platform is 100% accurate yet, therefore we built Seneca around you catching false statements (if any), rather than around us promising they will not happen.
Three things keep this risk in check:
- Seneca's AI Clinician Notes flags missing data as a gap rather than filling it in.
- Every generated statement highlights the exact source it came from, so double-checking doesn't require detective work.
- Nothing reaches a family without your review, editing and sign-off on every section.