Last updated: October 17, 2026
Atano, Inc. (“Atano,” “we,” “us,” or “our”) provides software that helps medical billing companies, credentialing firms, and healthcare practices manage provider credentialing and payer enrollment. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have.
This Policy applies to our website at getatano.com (the “Site”), the Atano software platform (the “Platform”), the Atano Chrome extension (the “Extension”), and related services, communications, and support (together, the “Services”).
Our platform model. Our customers are businesses (“Customers”). Customers upload and manage information about the healthcare providers they serve, such as physicians, nurse practitioners, and therapists (“Providers”). Atano processes that information on the Customer’s behalf and under the Customer’s instructions. The Customer decides what information goes into the Platform and who on its team can see it.
This means there are two kinds of information covered here:
By using the Services, you acknowledge that you have read this Privacy Policy.
Information you give us. When you fill out a form on our Site, respond to an ad, book a call, or contact us, we collect your name, business email, phone number, company name, job title, company size, and anything else you choose to share.
Account information. When a Customer sets up Atano accounts for its team, we collect each user’s name, email address, phone number, role, login credentials, and account settings.
Billing information. When a Customer pays for the Services, we collect billing contact details and payment information. Card and bank payments are processed by our payment processor. We do not store full card numbers on our systems.
Customer Data. Customers may upload information about Providers and practices, such as professional and licensing information, education and work history, practice details, and the documents and identifiers needed for credentialing and enrollment. Some of this information is sensitive, such as Social Security numbers and portal login credentials.
Information from third parties. We may receive business contact information about prospective customers from public sources, data providers, professional networks such as LinkedIn, and advertising platforms such as Meta when you submit a lead form. We may also receive information from primary sources, such as state licensing boards and the National Plan and Provider Enumeration System, when we verify Provider information at a Customer’s request.
Information collected automatically. When you visit the Site or use the Platform, we and our service providers automatically collect device and usage information. This includes IP address, browser type, device type, operating system, pages viewed, links clicked, referring URL, time and date of access, and approximate location based on IP address. We also keep activity logs for security and audit purposes.
How the Platform works. Customers use Atano to store Provider records, track expiring documents, prepare and submit credentialing and enrollment applications. Atano is a software tool. We do not decide whether a payer, hospital, or other organization approves a Provider. Those decisions belong to the payer or organization.
Customer Data is used only to provide the Services to the Customer who uploaded it. This includes to:
Information Atano controls is used to:
Sensitive information. Some Customer Data is considered sensitive under state privacy laws, such as Social Security numbers, account login credentials, and certain health-related information about a Provider (for example, an attestation question on an application). We use sensitive information only to provide the Services, keep them secure, and meet legal requirements. We do not use it for advertising.
The Platform is built to manage Provider credentialing and enrollment information. It is not designed to store patient records or other patient health information, and we do not provide patient care.
Customers agree not to upload PHI to the Platform. Provider information in the Platform, including any health-related answers on credentialing applications, is collected only for credentialing and enrollment purposes. It is protected as described in this Policy and under applicable state privacy laws.
How we protect information. We use reasonable administrative, technical, and physical safeguards designed to protect information from loss, misuse, and unauthorized access. These include encryption, access controls, and hosting data with Amazon Web Services (AWS) in the United States.
No system is perfectly secure, and we cannot guarantee that information will never be accessed without permission. Please keep your password private and tell us right away if you think your account has been compromised.
Security incidents. If we learn of a security incident affecting your information, we will notify affected Customers and individuals, and regulators where required, as required by law and our agreements.
How long we keep information. We keep Customer Data for as long as the Customer’s agreement with us is in effect. When the agreement ends, the Customer may ask us to return or delete its Customer Data. We delete it within a reasonable time after a valid request, unless the law requires us to keep it. Backup copies are deleted on a regular schedule. We keep other information for as long as needed for the purposes in this Policy, such as keeping business records and meeting tax and legal obligations.
De-identified and aggregated data. We may create data that has been stripped of anything that identifies a Customer, Provider, practice, or person, and combine it with other data. For example, we may measure average enrollment times by payer. We use this data to improve the Services and understand industry trends, and we will not try to re-identify it.
Artificial intelligence. The Platform may use artificial intelligence tools to help read documents, fill out forms, and complete tasks for Customers. We use Customer Data only to provide the Services.
Marketing emails. You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by contacting us. We may still send you service, billing, and account messages.
Access, correction, and deletion. Depending on where you live, you may have the right to ask what personal information we hold about you, get a copy of it, correct it, delete it, or opt out of targeted advertising. To make a request, email us at the address below. We will verify your identity before acting, respond within the time required by law, and will not treat you differently for making a request. If we deny your request, you may appeal by replying with “Privacy Appeal” in the subject line. You may also use an authorized agent with your written permission.
Providers whose data a Customer uploaded. If you are a Provider and a Customer, such as your billing company or practice, uploaded your information, please send your request to that Customer. They control your information in the Platform. If you contact us directly, we will forward your request to the Customer and help them respond.
The Services are for businesses and adult professionals. They are not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it.
Atano is based in the United States, and we store and process information in the United States. If you use the Services from outside the United States, your information will be transferred to and processed in the United States.
The Services may link to or connect with websites and services we do not run, such as payer portals and CAQH. This Policy does not cover them. Please review their privacy policies.
We may update this Policy from time to time. When we do, we will change the “Last Updated” date at the top. If we make material changes, we will notify Customers by email or through a notice on the Site or in the Platform before the changes take effect.
This section applies to the Extension, which you can install from the Chrome Web Store. It is part of the Services, so the rest of this Policy applies too. If this section and another section conflict about the Extension, this section controls.
What the Extension does. The Extension lets signed-in Atano users use Atano features while they work on other websites, such as payer and credentialing portals. Its single purpose is to help Customers manage Provider credentialing and payer enrollment.
What the Extension accesses.
What the Extension collects. We collect only the information needed to provide the Extension’s features.
How information from the Extension is used. We use it only to provide and improve the Extension’s features and the Services. Information from the Extension is stored and protected the same way as other Customer Data described in this Policy.
Sharing. We do not sell information collected through the Extension. We do not use or transfer it for personalized advertising, and we do not use it to decide whether someone qualifies for credit or a loan. We share it only as needed to provide the Extension’s features, with the service providers described in Section 5, to comply with the law, to protect against fraud, abuse, or security threats, or as part of a business sale or merger as described in Section 5.
Human access. Our team does not read information from the Extension except when you or the Customer asks us to for support, when it is needed for security or to investigate abuse, when the law requires it, or when the information has been combined and stripped of identifying details for internal operations.
Google Chrome Web Store User Data Policy. The use of information received through the Extension will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Your choices. You can remove the Extension at any time in your Chrome settings. This stops it from collecting new information. Information already in your Atano account stays there under Section 7 until you or your Customer asks us to delete it.
If you have questions about this Policy or want to make a privacy request, contact us at:
Atano, Inc.