Legal

Sahha's legal documents. This page is the canonical home for the full set. If you are reviewing Sahha for procurement, everything you need is linked below.

Privacy

Privacy Policy How we handle personal information about our customers and the people we deal with directly, and the rights you have over it.
End User Privacy Policy How we handle the health and wearable data of people using an app built on Sahha, and what those people can ask us to do with it.

Building on Sahha

Terms of Use The terms governing use of our websites and the content published on them.
API Licence Agreement The standard terms governing commercial use of the Sahha API, SDK and Platform.
Data Processing Addendum GDPR Article 28 processor terms, including the EU SCCs and UK Addendum. Forms part of the API Licence Agreement. Effective September 16, 2026
Customer Data Use Policy The rules customers must follow when handling data obtained through our API. Forms part of the API Licence Agreement. Effective July 24, 2026

Security and compliance

SOC 2, HIPAA and GDPR status, the document library, our data flow and the controls behind it are on the security page. The sub-processor register has its own URL so a DPA can reference it directly. For question-by-question detail, see the Security & Compliance FAQ.

Questions about any of these documents: hello@sahha.ai.