What this helps you do.

A privacy claim is only useful if it matches the setup. Account settings and connected services matter as much as the model you choose.

A written record of the data and permissions involved in one workflow.

The workflow.

Test with non-confidential material. Resolve the permissions and provider settings before using client information.

  1. List the information the task needs. Leave out details that do not help produce the result.
  2. Map every service that receives or stores that information, from the recorder to the final document.
  3. Check the current terms and settings for each account. Record what applies to storage, training and deletion. Do not assume every plan works the same way.
  4. Decide who can view the data, approve a connection or remove access. Keep separate accounts and keys for separate coaching businesses.
  5. Agree on retention and deletion, including backups. Explain the actual workflow to clients and resolve the permissions required before using their information.
  6. Test with non-confidential material. Check that errors stop the workflow without exposing the input.

Keep a record of your decisions.

Write down the source material, approval step and destination before you connect the workflow. Revisit those choices when your process changes.

Browse the other guides