What is the Data Trust Index?

The Data Trust Index (DTI) is an eight-dimensional scoring framework that evaluates health data records on a 0-100 scale. Developed by SuperTruth Inc., it functions as the FICO score for health data. The eight dimensions are Provenance (25%), Consent (20%), Recency (15%), Quality (10%), Concordance (10%), Validation (10%), Breadth (5%), and Stability (5%). DTI scores travel permanently with every record. Trust tiers: Bronze 55-69 (exploratory), Silver 70-79 (operational-grade), Gold 80-89 (clinical-grade), Platinum 90+ (regulatory-grade).

SuperTruth is the trust layer underneath healthcare data and AI. It is not a warehouse, not an EHR, and not a cloud platform. SuperTruth is the verification layer that proves health data is accurate, consented, and current before any AI model or clinical decision touches it. The company builds the Data Trust Index (DTI), IntegrityNet, ConsentOS, the Data Reservoir, VIOLET, DataSpine, and related products.

How does SuperTruth score health data?

SuperTruth scores health data using the Data Trust Index (DTI), which evaluates every record across eight dimensions: Provenance (where the data came from and its chain of custody), Consent (whether collection and use were properly authorized), Recency (how current the data is, with time-decay applied by modality), Quality (completeness and accuracy), Concordance (whether findings corroborate across independent sources), Validation (clinical linkage to outcomes), Breadth (dimensional richness), and Stability (variance control). The resulting score from 0-100 travels permanently with the record.

VIOLET (Visual Intelligence Layer for Oncology Trends and Evidence Triangulation) is SuperTruth's behavioral signal intelligence platform for oncology and rare disease. It maps what cancer patients search before they reach a clinic, tracking 750+ search terms across 20 semantic clusters with 5 years of historical data from 6 evidence sources: ClinicalTrials.gov, PubMed, FDA openFDA, Google Scholar, Google News, and patents. VIOLET identifies behavioral signals 12-18 months before clinical presentation.

What is the difference between data quality and data trust?

Data quality addresses whether a record is complete, correctly formatted, and free of errors. Data trust addresses a harder set of questions: where did this data come from, was the consent obtained properly, how current is it, does it corroborate with independent sources, and has it been validated against clinical outcomes? A record can be clean and completely untrustworthy. SuperTruth's Data Trust Index scores both dimensions, along with six others, to produce a single defensible score.

SuperTruth: AI Data Trust Platform

1. Who We Are

SuperTruth Inc. (“SuperTruth,” “we,” “us,” or “our”) is a Delaware corporation that provides data infrastructure and trust-scoring technology for healthcare organizations. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit supertruth.ai or use our services.

SuperTruth is not a healthcare provider and does not provide medical advice. Our platform is designed for enterprise use by healthcare organizations and qualified professionals. This policy covers our marketing website and public-facing tools. Enterprise deployments are separately governed by applicable Master Services Agreements and Business Associate Agreements.

2. Information We Collect

Information you provide directly:

Contact information (name, email, phone, company) when you request a demo, contact us, or subscribe to communications
Messages and inquiries you send through contact forms or the AI chat agent
Professional information (job title, organization) you choose to share

Information collected automatically:

Log data: IP address, browser type, operating system, referring URL, pages visited, time spent
Device information: device type, screen resolution, language settings
Analytics data: interactions with pages, features, and content (see Section 3)
Cookies and similar tracking technologies (see Section 3)

What we do not collect on this site:

Protected Health Information (PHI) — our public website is not configured to receive PHI
Payment or financial information — all enterprise billing is handled separately
Precise geolocation beyond general location inferred from IP address
Biometric data

3. Cookies and Analytics

We use cookies and similar technologies to operate and improve the site. You can configure your browser to refuse cookies, but some features may not function properly.

Strictly necessary cookies: Required for the site to function. No consent required.

Analytics: We use Google Analytics 4 (Google LLC) to understand how visitors use this site. Google Analytics collects information including pages visited, time on site, device type, browser, and general location derived from IP address. Google may use this data in accordance with its own privacy policy. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

Traffic personalization: We use cookies to detect how you arrived at the site (e.g., LinkedIn, Google search, email) and may adapt site content accordingly. This information is stored locally in your browser and is not shared with third parties for advertising purposes.

Do Not Track: We currently do not alter our data practices in response to Do Not Track signals, as there is no uniform standard for how these signals should be interpreted.

4. AI Chat Agent

Our site includes an AI-powered conversational agent (the “Truth Agent”). When you interact with the Truth Agent, we collect and store the content of those conversations, including any information you voluntarily provide. Conversations may be reviewed by SuperTruth staff for quality, safety, and product improvement purposes.

Do not submit Protected Health Information, patient data, personally identifiable health information, or other sensitive regulated data into the Truth Agent. The Truth Agent is not configured or certified to process PHI and is not covered by HIPAA safeguards in this context.

Conversation data is processed by Anthropic, Inc. (provider of the underlying AI model) as a sub-processor. Anthropic’s handling of this data is subject to our Data Processing Agreement with them.

5. How We Use Your Information

We use the information we collect to:

Respond to inquiries and fulfill demo requests
Send requested communications and updates (you may opt out at any time)
Improve and develop our products and the site
Detect, prevent, and address fraud, security issues, and abuse
Comply with legal obligations and enforce our Terms of Use
Conduct internal analytics and business operations

We will not use your personal information for purposes materially different from those described here without providing notice and, where required, obtaining consent.

6. How We Share Your Information

We do not sell your personal information. We do not share your personal information for cross-contextual behavioral advertising.

We may share your information with:

Service providers (sub-processors): Companies that help us operate the site and services, including:
- Google LLC (Google Analytics, Google Workspace)
- Anthropic, Inc. (AI processing for the Truth Agent)
- Neon, Inc. (database hosting)
- Resend, Inc. (transactional email delivery)
- Railway, Inc. (application hosting)
Legal compliance: When required by law, court order, or valid legal process, or when necessary to protect the rights, property, or safety of SuperTruth, our users, or others
Business transfers: In connection with a merger, acquisition, financing, or sale of all or a portion of our business
With your consent: For any other purpose with your explicit agreement

7. HIPAA and Enterprise Data

SuperTruth’s enterprise platform is designed to serve HIPAA Covered Entities. When SuperTruth processes PHI on behalf of an enterprise customer pursuant to a Business Associate Agreement, that processing is governed by the BAA and applicable HIPAA regulations, not by this Privacy Policy.

This Privacy Policy governs information collected through the public website and marketing interactions only. If you are an enterprise customer with questions about how PHI is handled within your SuperTruth deployment, contact your account representative or refer to your Enterprise Agreement and BAA.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

Contact and demo request information: Retained for the duration of our business relationship and for up to 3 years afterward, unless you request deletion
AI chat conversations: Retained for up to 2 years for quality and safety review
Analytics data: Retained per Google Analytics default retention settings (up to 14 months)
Financial and transactional records: Retained for a minimum of 7 years as required for accounting and legal compliance

9. Data Security

We implement technical, administrative, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), access controls, and vendor security requirements for sub-processors.

No transmission over the internet or electronic storage system is completely secure. While we work to protect your information, we cannot guarantee absolute security. You use the Services at your own risk.

10. Your Privacy Rights

Depending on where you are located, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information (subject to legal retention requirements)
Opt out of marketing communications at any time
Opt out of analytics tracking (see Section 3)

To exercise any of these rights, contact us at privacy@supertruth.ai. We will respond within 30 days. We will not discriminate against you for exercising your privacy rights.

11. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Categories of personal information we collect (in the past 12 months):

Identifiers (name, email, IP address, company)
Internet or network activity (pages visited, interactions, browser data)
Professional or employment-related information (job title, organization)
Inferences drawn from usage data

We do not collect: biometric data, precise geolocation, financial account numbers, health information, or government IDs through this website.

We do not sell or share your personal information for cross-contextual behavioral advertising as defined under CCPA.

California residents may request: (a) the categories and specific pieces of personal information we have collected; (b) categories of sources from which we collected it; (c) business or commercial purposes for collecting it; (d) categories of third parties with whom we share it; and (e) deletion of their personal information (subject to exceptions).

To submit a request, contact privacy@supertruth.ai with the subject line “California Privacy Request.” We will verify your identity before fulfilling requests. You may use an authorized agent with written authorization.

12. European and UK Residents (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR) and UK GDPR.

Legal bases for processing: We process your personal information on the following legal bases:

Legitimate interests (operating and improving the site, responding to inquiries, security)
Contract performance (fulfilling demo requests and service agreements)
Legal compliance (retaining records as required by law)
Consent (where you have specifically opted in, e.g., marketing communications)

Your rights: Access, rectification, erasure, restriction of processing, data portability, objection to processing, and the right to withdraw consent at any time.

International transfers: Your information may be transferred to and processed in the United States. Where required, we use appropriate safeguards such as Standard Contractual Clauses to protect such transfers.

To exercise your GDPR rights, contact privacy@supertruth.ai. You also have the right to lodge a complaint with your local data protection authority.

13. Children’s Privacy

The Services are intended for business and professional use. We do not knowingly collect personal information from individuals under the age of 13 (or equivalent minimum age in the relevant jurisdiction). If we learn that we have collected such information, we will delete it promptly. If you believe we may have collected information from a minor, contact us at privacy@supertruth.ai.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy with an updated “Last updated” date. For material changes, we will provide additional notice where appropriate. Your continued use of the Services after changes become effective constitutes acceptance of the updated policy.

15. Contact Us

For privacy-related questions, rights requests, or concerns, contact:

SuperTruth Inc.
Privacy Team
privacy@supertruth.ai

We will acknowledge your request within 5 business days and respond within 30 days.