Your data belongs to you.

EDNA was built on a simple principle: your professional credentials are yours — not your employer's, not ours to sell.

Last updated: May 2026 · Operated by Marodi Digital Automation LLC

This policy is a working draft pending attorney review. Final version will be published prior to public launch.

1. Information We Collect

EDNA collects information you provide directly when creating a profile:

Name, email address, phone number
Professional credentials — NPI, licenses, certifications, DEA number
Employment and privilege relationships
Continuing education completion records
Credential documents you upload

We also collect limited technical data (IP address, browser type, device type) for security and performance purposes.

2. How We Use Your Information

To provide and maintain your EDNA credential profile
To track and notify you of CE and license compliance status
To notify your connected employers of compliance changes (only with your authorization)
To verify credentials against public registries (NPI, OIG, SAM.gov)
To send you renewal reminders and platform notifications

3. What We Never Do

EDNA will never:

Sell, rent, or share your personal data with advertisers or data brokers
Share your data with any employer without your explicit authorization
Use your credentials for any purpose other than providing EDNA services
Show your primary employer your activity at other facilities

4. Data Sharing

Your data is shared only in these circumstances:

Connected employers: Only employers you explicitly connect to can view your compliance status — and only the data you authorize
CE providers: Completion records are shared with the CE provider who delivered the course
Service providers: We use Supabase (database), Stripe (payments), and Netlify (hosting) — all under data processing agreements
Legal requirements: We may disclose data if required by law or valid legal process

5. HIPAA

EDNA is designed to be HIPAA-Ready. We maintain technical and administrative safeguards appropriate for a platform handling healthcare professional data. For covered entity customers, a Business Associate Agreement (BAA) is available upon request.

6. Data Retention

Your data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting privacy@ednaknows.com. Certain records may be retained as required by law.

7. Your Rights

Access your data at any time through your EDNA dashboard
Export your credential profile
Correct inaccurate information
Request deletion of your account
Withdraw authorization from connected employers

8. Contact

Privacy questions: privacy@ednaknows.com
Marodi Digital Automation LLC · Coeur d'Alene, ID