Question 1

Where does Decagon store patient data?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 2

Where does Decagon process data?

Accepted Answer

US-headquartered; personal information may be transferred to the United States or other locations Published statement: "We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations" (source: https://decagon.ai/privacy, checked 2026-08-12). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 3

Which AI models does Decagon use?

Accepted Answer

Vendor states zero-day retention with all AI providers, such as OpenAI and Anthropic, so no conversation data is stored or used for training by them Published statement: "Decagon enforces zero-day retention with all AI providers like OpenAI and Anthropic, ensuring no conversation data is stored or used for training." (source: https://decagon.ai/security, checked 2026-08-12). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 4

What certifications does Decagon publish?

Accepted Answer

Vendor states SOC 2 Type II compliance and HIPAA options. Security page additionally displays compliance badges (GDPR, CCPA, EU AI Act, HIPAA, SOC 2, ISO, PCI) as images without accompanying text. Published statement: "Built with security at its core, the platform includes SOC 2 Type II compliance, HIPAA options, and strict guardrails for sensitive actions like refunds." (source: https://decagon.ai/resources/enterprise-conversational-ai-features, checked 2026-07-28). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 5

Which subprocessors does Decagon name?

Accepted Answer

No public subprocessor list found; Google's DLP service named for PII redaction Published statement: "Decagon enforces zero-day retention with AI providers, uses secure key management, and automatically redacts PII using Google's DLP service." (source: https://decagon.ai/security, checked 2026-08-12). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 6

What does Decagon publish about TGA status?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 7

Which practice management systems does Decagon list as integrations?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 8

Which Australian or New Zealand entity does Decagon contract through?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 9

What support hours does Decagon publish?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Decagon

Data storage region

Data processing region

Model provenance

Subprocessors

Certifications

TGA status

PMS integrations

ANZ entity

Support hours

What Decagon publishes — answered from the record

Something wrong or out of date?