Privacy

Agency staff see enrollee records only inside their own agency. The platform view used to manage licenses does not open enrollee records, dates of birth, intake files, or commission lines.

Dates of birth, Social Security numbers, intake payloads, message bodies, and uploaded files are encrypted at rest. Screens and files show at most the last 4 digits of a Social Security number. Sessions are stored as a hashed token in an httpOnly cookie.

Mail to employees uses the sending agency’s name and contact details. The platform line at the bottom names ClearEnroll LLC. Unsubscribing from those emails stops the messages. It does not change plan participation.

ClearEnroll is not a HIPAA compliance certification, and using it does not by itself make a deployment compliant.