Regulatory Compliance Policy

Nested Knowledge adheres to legal requirements for data protection and information security. Nested Knowledge is located in the United States. Nested Knowledge provides software to countries throughout the world, with the exception of countries sanctioned by the United States.

GDPR Compliance #

Nested Knowledge adheres to the General Data Protection Regulation (GDPR). For details and technical controls, see the GDPR compliance policy.

California Consumer Privacy Act  #

Nested Knowledge adheres to the California Consumer Privacy Act (CCPA), as well as the California Civil Code Section 1798.83, also known as the “Shine The Light” law. For information on requesting data and the privacy rights of California residents, please refer to the Privacy Policy.

HIPAA #

The Health Insurance Portability and Accountability Act (HIPAA) is not applicable to Nested Knowledge because Nested Knowledge does not process any personal health information, and we have no plans to begin processing such data. The clinical data which may be retrieved in the Nested Knowledge application consists of public data from the published scientific literature.

Other Regulatory Policies #

Nested Knowledge remains up-to-date on legal and regulatory obligations including regulations on copyright, document retention, human resources, and artificial intelligence. The company monitors regulatory requirements affecting software-as-a-service businesses.

For related policies: see the AI Compliance Policy, Document Retention Policy, and Notice of Copyright Infringement Policy.

Revision History #

For any GDPR-related issues, contact the DPO or CEO (see Key Contacts).