A new standard for medical records retrieval.

Why we exist.

CareThread360 was founded on a single observation: the medical records retrieval process is one of the most consequential bottlenecks in healthcare-adjacent industries, and it has gone largely unsolved. Law firms wait weeks for records that determine case value. Hospitals leave revenue on the table while appeals stall. Life insurers lose applicants during an underwriting window that stretches far longer than it should.

We built CareThread360 to eliminate that wait entirely — not to incrementally improve it, but to replace the workflow with something categorically different. One request. Every source. Twenty-four hours.

How we're built.

CareThread360 is a retrieval infrastructure company. Our network spans thousands of independent medical record sources — hospital systems, ambulatory clinics, specialists, imaging facilities, mental health providers — and we've built the relationships, the integrations, and the operational depth to pull from all of them in parallel. Our customers submit a single request; we handle the rest.

We operate under HIPAA / HITECH-grade controls from day one. Business Associate Agreements are signed with every customer. Our audit logs are immutable and per-patient. Every record in transit and at rest is encrypted to AES-256 / TLS 1.3 standards. Compliance is not a feature we added — it is the foundation we built on.

Who we serve.

Our platform is purpose-built for three verticals where speed and completeness of records directly affect outcomes: personal injury law firms, where incomplete records leave settlement value unrealized; healthcare providers, where delayed records extend denial cycles and age receivables; and life insurance underwriters, where slow APS retrieval is the single largest driver of applicant drop-off.

Get in touch.

We are selective about the customers we onboard and the partnerships we pursue. If you believe CareThread360 belongs in your workflow, we'd welcome a conversation. Reach us at hello@carethread360.com or request a walkthrough above.

1. Who we are.

CareThread LLC ("Carethread," "we," "us," or "our") is a medical records retrieval platform headquartered in Charleston, South Carolina. This Privacy Policy describes how we collect, use, disclose, and protect information when you access our website at carethread360.com (the "Site") or use our retrieval platform (the "Services").

2. Information we collect.

Information you provide directly. When you complete the Tailored Analysis form, request a walkthrough, or correspond with us, we collect your name, work email address, phone number, job title, organization name, and any operational figures or notes you submit voluntarily.

Information collected automatically. We collect standard server log data including IP addresses, browser type, referring URLs, and pages visited. We use this data solely for security monitoring and aggregate analytics. We do not sell or license this data.

Protected Health Information (PHI). CareThread360 processes PHI on behalf of its customers under the terms of a signed Business Associate Agreement (BAA). PHI processed through the Services is governed by HIPAA / HITECH requirements and by the contractual terms between CareThread360 and each covered entity or business associate customer. CareThread360 does not use PHI for any purpose other than providing the Services.

3. How we use your information.

• To respond to inquiries and schedule walkthroughs requested by you.
• To deliver, maintain, and improve the Services.
• To fulfill legal and compliance obligations, including HIPAA requirements.
• To communicate service updates and relevant operational notices.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. How we share your information.

Service providers. We engage a limited set of vetted subprocessors (listed at carethread360.com/subprocessors) to operate the Services. All subprocessors are bound by data processing agreements consistent with applicable law.

Legal requirements. We may disclose information where required by law, court order, or governmental authority, or where we believe disclosure is necessary to protect our rights or the safety of others.

Business transfers. In the event of a merger, acquisition, or sale of substantially all assets, user information may be transferred as part of that transaction, subject to the protections described in this Policy.

5. Data retention.

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. PHI is retained and disposed of in accordance with the applicable BAA and HIPAA requirements.

6. Security.

CareThread360 implements administrative, technical, and physical safeguards appropriate to the sensitivity of the information we process, including AES-256 encryption at rest, TLS 1.3 in transit, immutable audit logging, and access controls. No system is perfectly secure; we encourage customers to use strong credentials and to report suspected security issues to security@carethread360.com.

7. Your rights.

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal information. To exercise these rights, contact us at privacy@carethread360.com. We will respond within 30 days. Note that certain information may be subject to legal hold or regulatory retention requirements that limit our ability to delete it.

8. Changes to this policy.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the Services after a change constitutes acceptance of the revised Policy.

9. Contact.

Questions about this Policy or our privacy practices may be directed to privacy@carethread360.com or by mail to CareThread LLC, Attention: Privacy, Charleston, SC.

1. Agreement to terms.

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Customer," "you," or "your") and CareThread LLC ("Carethread," "we," "us," or "our") governing your access to and use of the CareThread360 platform, website, and associated services (collectively, the "Services"). By accessing the Services or executing an Order Form that references these Terms, you agree to be bound by them. If you are entering into these Terms on behalf of an organization, you represent that you have authority to bind that organization.

2. The Services.

CareThread360 provides a medical records retrieval platform that, upon Customer request and with valid patient authorization, retrieves records from third-party medical record sources and delivers them to Customer's designated secure folder. CareThread360 is a business associate as defined under HIPAA and will execute a Business Associate Agreement (BAA) with each covered entity or business associate Customer prior to processing any Protected Health Information.

The Services are provided for lawful, professional use only. Customers are solely responsible for obtaining valid patient authorizations and for ensuring their use of retrieved records complies with applicable law, including HIPAA, state privacy statutes, and any applicable professional conduct rules.

3. Customer obligations.

• Maintain the confidentiality of your account credentials and notify CareThread360 immediately of any unauthorized access.
• Provide accurate and complete information when submitting retrieval requests.
• Obtain and retain valid patient authorizations before submitting any request involving PHI.
• Use the Services only for lawful purposes and in compliance with all applicable laws and regulations.
• Not attempt to reverse-engineer, circumvent, or interfere with the security or operation of the Services.

4. Fees and payment.

Fees for the Services are set forth in the applicable Order Form or as otherwise agreed in writing. All fees are due in accordance with the payment terms specified therein. CareThread360 reserves the right to suspend access for accounts that are materially past due following written notice and a cure period.

5. Intellectual property.

CareThread360 retains all right, title, and interest in and to the Services, including all underlying technology, software, processes, and documentation. Customer retains all right, title, and interest in and to Customer data, including retrieved records. Nothing in these Terms transfers ownership of either party's intellectual property to the other.

6. Confidentiality.

Each party agrees to protect the other's Confidential Information with at least the same degree of care it uses to protect its own confidential information, but no less than reasonable care. Confidential Information does not include information that is publicly known, independently developed, or lawfully obtained from a third party without restriction. This obligation survives termination of these Terms for a period of three years, and indefinitely with respect to PHI.

7. Disclaimers.

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE." CARETHREAD DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF HARMFUL COMPONENTS. CARETHREAD EXPRESSLY DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. CARETHREAD DOES NOT GUARANTEE THAT ANY PARTICULAR RECORD EXISTS, IS ACCESSIBLE FROM A GIVEN SOURCE, OR WILL BE RETRIEVED WITHIN ANY SPECIFIED TIMEFRAME, EXCEPT AS EXPRESSLY SET FORTH IN A SIGNED ORDER FORM.

8. Limitation of liability.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, CARETHREAD'S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS SHALL NOT EXCEED THE FEES PAID BY CUSTOMER TO CARETHREAD IN THE TWELVE MONTHS PRECEDING THE CLAIM. IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, EVEN IF ADVISED OF THE POSSIBILITY THEREOF. NOTHING IN THIS SECTION LIMITS LIABILITY FOR A PARTY'S GROSS NEGLIGENCE, WILLFUL MISCONDUCT, OR BREACH OF ITS HIPAA OBLIGATIONS.

9. Term and termination.

These Terms remain in effect for the duration of any active Order Form or subscription. Either party may terminate for cause upon 30 days' written notice if the other party materially breaches these Terms and fails to cure within that period. Upon termination, Customer's access to the Services will cease and each party will promptly return or destroy the other's Confidential Information, subject to applicable retention requirements.

10. Governing law and disputes.

These Terms are governed by the laws of the State of South Carolina, without regard to conflict of law principles. Any dispute arising under these Terms shall first be subject to good-faith negotiation between the parties. If unresolved after 30 days, disputes shall be submitted to binding arbitration under the JAMS Streamlined Arbitration Rules, conducted in Charleston, SC, except that either party may seek injunctive or other equitable relief in any court of competent jurisdiction.

11. Modifications.

CareThread360 reserves the right to modify these Terms upon 30 days' notice to Customer. Notice may be provided by email to the address on file or by posting updated Terms to this page. Continued use of the Services after the effective date of any modification constitutes acceptance of the revised Terms.

12. Entire agreement.

These Terms, together with any applicable Order Form and the BAA, constitute the entire agreement between the parties regarding the Services and supersede all prior discussions or agreements relating to the same subject matter. In the event of a conflict between these Terms and a signed Order Form, the Order Form controls.

13. Contact.

Legal notices and questions regarding these Terms may be directed to legal@carethread360.com or by mail to CareThread LLC, Attention: Legal, Charleston, SC.