Trust & safety

Sensitive records should stay under your control

Sodam aims to handle only what is needed and make storage, sharing, and deletion understandable choices.

01 · Control

Control by default

Recording and calendar access require permission; core notes remain usable without them.

Records are private by default and shared only when the user chooses.

Users can request record or account deletion. Data subject to a legal retention duty may be excepted.

02 · Data

Supabase authentication and row-level security (RLS) restrict access by account.

HTTPS/TLS protects data in transit between supported services.

Data needed for requested transcription or summaries may be sent to processors such as OpenAI and Twilio.

Calendar and microphone access is requested when needed and can be revoked in device settings.

Team access is intended to be restricted by role and business need.

We are incorporating PIPA principles and conducting legal review. We do not claim formal certification or complete compliance.

Security is an ongoing practice, not a one-time promise. Before launch, we will review data flows, retention, processor agreements, and user notices.

Coming soon

Sodam brings everyday symptoms and visit details together, helping you remember the conversations that matter.