Last updated 13 September 2026
We hold your email address, your name, your fieldwork entries, and your supervisor’s name and email. We do not hold anything about your clients, we do not sell or share your information, and you can export everything or delete your account at any time.
That signature evidence exists so the record is defensible in an audit years later. It is not analytics and it is not used for anything else.
You can attach documents to your record — signed verification forms, your supervision contract, certificates. We store the file itself, its name, its size and a checksum. Files are only ever served back as downloads, never rendered in the browser, and only to you and the supervisor of the track the file belongs to.
We cannot see inside your uploads, and we ask you not to put client information in them. Nothing else in this product accepts a client name — there is no field for one anywhere — and a document is the one place such details can arrive by accident. If you upload something you should not have, delete it; the file goes, and the audit log keeps only the fact that a file existed and was removed.
Programs and scripts are rejected at upload. Everything else is accepted, up to 4 MB per file.
Anything identifying your clients. There is no field in this product to enter a client name, date of birth, address, medical record number or any other identifier. Clients are short codes that only you can interpret.
This is a design decision, not an oversight: it keeps protected health information off our systems by default. The exception is the files you choose to upload, described above — please keep client details out of those and out of the free-text fields.
We also do not run advertising, do not use third-party tracking or advertising cookies, and do not build a profile of you.
You give us your supervisor’s name and email so we can send them the month to sign. We email them only about months you submit and copies of what they have signed. We do not market to them, and they can ask us to delete their details once your supervisory relationship ends.
We do not sell your information. We use a small number of providers to run the service:
They process data on our instructions in order to provide the service, and for nothing else. We will also disclose information if the law requires it.
The BACB expects both you and your supervisor to retain fieldwork records for at least seven years, so we keep your record available for at least that long unless you delete it. Signed months cannot be edited — that is what makes the signature meaningful — but you can delete your account and everything in it.
If you stop paying, your record is not deleted and is not held hostage. You keep read-only access and full export, free.
Email support@somexai.com for any of these. Depending on where you live you may have additional rights under laws such as the GDPR or the CCPA; tell us and we will honour them.
There are no passwords in this product, so there are none to leak. Sign-in links and supervisor signing links are single-use, expire, and are stored only as hashes. Traffic is encrypted in transit and data is encrypted at rest by our providers.
No system is perfect. If you find a security problem, please write to support@somexai.com and we will take it seriously and act quickly.
SignedHours is for practising professionals and is not intended for anyone under 18.
If we change this policy in a way that matters, we will email you before it takes effect rather than quietly updating the date at the top.