01 · Data ownership & portability
For: CEO / CFO / ITThe operating record belongs to the operator. SeniorCRE is the layer above your systems, not a walled garden underneath them.
- Q01
Do we own our data outright, or does the vendor retain rights to aggregated or de-identified derivatives?
You own it outright. SeniorCRE does not claim rights to aggregated, de-identified, or derivative datasets built from your operating record. Any benchmarking a customer participates in is opt-in, contractually scoped, and revocable — not a default term of service.
Evidence · Master agreement: operator-owned data clause; no vendor-derivative rights; opt-in benchmark participation.
- Q02
Is there a contractual off-ramp — full export in a documented, portable format, within a defined SLA — or are we negotiating that at exit?
Yes. Full export in documented, portable formats (CSV, JSON, FHIR for clinical) is a contractual right, not a courtesy — with a defined SLA measured in days, not quarters. Because SeniorCRE sits above your existing systems, the underlying records in Yardi, PointClickCare, MatrixCare, or your GL never leave your control in the first place.
Evidence · Contract Schedule B — export formats, SLA, and termination-assistance window.
- Q03
Where does the data physically reside, and does that satisfy our residents' state privacy statutes and any lender covenants?
US-region infrastructure with HIPAA-safeguarded controls, encryption in transit and at rest, and RLS enforcement at the database layer. Regional residency, BAAs, and lender-facing security attestations are provided as part of standard onboarding.
Evidence · Security posture page, BAA on request, SOC-aligned control catalog.