Ambition Health Back to site
Privacy

Business intake now. PHI later, only on the right rails.

This page explains the current privacy posture for the Ambition public site and preview environment. Production patient workflows will use BAA-covered infrastructure before real protected health information is processed.

No PHI in public forms

The early-access application is for business information only. Do not submit patient, prescription, lab, diagnosis, payment-card, or medical information.

What we collect How we use it Sharing HIPAA path

What we collect

Public forms may collect business contact information, company details, role, intended program categories, launch timeline, and notes submitted by the applicant. The preview product should not be used for real patient records.

How we use it

We use submitted business information to evaluate early-access fit, respond to inquiries, schedule calls, improve the product, maintain security, and prepare commercial agreements.

Sharing

We may use service providers for hosting, analytics, email, CRM, security, and operational tooling. We do not sell business-intake information. Production PHI workflows require appropriate contractual, technical, and operational controls.

HIPAA path

Ambition is structured with a HIPAA-informed boundary: no real PHI in the public application or preview environment. Before patient data is processed, the relevant services, vendors, access controls, logs, policies, and business associate agreements must be in place.

Last updated May 26, 2026. Draft privacy overview for review.