Sensitive data and responsible use
What belongs in ComplyNestly, what does not, and the compliance claims the product does not make.
ComplyNestly is a workforce credential tracker. Keeping the data inside it within that scope protects both your organization and your people.
What belongs here
- Professional licenses and certifications.
- Training and safety records such as OSHA cards or forklift certifications.
- Credential numbers, issuing authorities, and expiration dates.
- Employment context: job title, department, location, employee number, and hire date.
What does not belong here
- Patient records, medical charts, or clinical notes.
- Protected health information of any kind, including information about your own employees.
- Payment card data or bank details.
- Government identifiers beyond what a credential document itself contains.
Setting expectations with employees
- 1Tell employees exactly which documents to submit through the portal.
- 2State explicitly that medical and patient information must not be uploaded.
- 3Turn off document upload if you only need details entered, not files attached.
- 4Review submissions when you approve them, and reject anything containing information that should not be there.
Claims to avoid
ComplyNestly reports what your records show. It does not certify that your organization meets any legal, regulatory, or licensing standard, and nothing it produces — including AI briefs and narratives — is legal advice.
Exported files leave the product's access controls entirely. Handle them under your own confidential-data policies.