Legal

Privacy Policy

Effective Date: April 12, 2026  ·  Last Updated: April 12, 2026

We collect only what we need to certify you and comply with the law. We never sell your data. We never use AI to make decisions about your credentials.

Contents
Introduction What Information We Collect Certificate Accuracy and Professional Data How We Use Your Information Continuing Medical Education (CME/CEU) Data Artificial Intelligence: How We Use It and How We Don't Legal Basis for Processing (GDPR) How We Share Your Information Payment Card Information Cookies and Tracking Technologies Data Retention Data Security International Data Transfers Your Legal Rights Age Restrictions Third-Party Links Data Protection Contact Changes to This Policy

Introduction

The American Academy of Expert Medical Evaluators ("AAEME," "we," "us," or "our") is committed to protecting the privacy of every individual who interacts with our website, courses, and certification programs. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have over it.

AAEME is subject to the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) and the United Kingdom, the California Consumer Privacy Act (CCPA) for California residents, and applicable United States federal and state privacy laws.

This policy covers two distinct categories of data: personal data (information that identifies you as an individual) and professional data (information related to your medical licensure, credentials, and professional practice). Both are treated with equal seriousness.

Questions about this policy? Contact us at support@aaeme.com before using this site.

What Information We Collect

Personal Data

When you create an account, register for a course, or sit a certification exam through AAEME, we collect:

Professional Data

Because AAEME issues credentials recognized in legal and regulatory proceedings, we also collect professional data directly relevant to your licensure status and certification eligibility:

Professional data such as NPI numbers and state license numbers are matters of public record maintained by government agencies. We collect them in combination with your personal data to verify licensure eligibility, issue accurate credentials, support state reporting obligations, and maintain the integrity of the AAEME certification program.

The combination of personal and professional data constitutes a more sensitive profile than either category alone. We treat this combined profile with heightened care and do not use it for any purpose beyond those described in this policy.

Automatically Collected Data

When you visit aaeme.com, we automatically collect certain technical information through cookies and similar technologies, including browser type, operating system, pages visited, referring website, and general geographic location (country and state level, not precise location). This data is collected in aggregate and used solely to improve site performance. It is not used to build individual profiles.

Certificate Accuracy and Professional Data

Your CIRS™ and NIRSAT™ certificates are legal credentials that may be presented in workers' compensation proceedings, depositions, and regulatory filings. Certificate accuracy is a legal matter, not merely an administrative one.

Your certificate will be issued exactly as your name appears on your AAEME registration form. AAEME relies entirely on the information you provide and cannot independently verify name accuracy at the time of registration.

By registering with AAEME, you confirm that:

Name changes after certificate issuance (including corrections due to registration errors) are subject to a reprint fee. AAEME is not responsible for errors in certificates that result from inaccurate information provided at registration.

Where AAEME partners with accredited third-party continuing education or continuing medical education (CME/CEU) administrators, those partners may independently verify your credentials against their own records as part of the credit issuance process. Their verification practices are governed by their own privacy policies, which we will provide to you at the time of enrollment in any CME/CEU-eligible activity.

How We Use Your Information

To Deliver Our Services

To Meet Legal and Regulatory Obligations

AAEME is designated by the State of Nevada as a certification provider under NV Rev. Stat. 616C.110. This creates specific legal obligations:

We will notify you of any such disclosure to the extent permitted by law.

To Maintain Exam Integrity

Certification exams carry legal weight. To protect the integrity of the AAEME credentialing program, we collect and retain IP addresses, session duration, question-level response data, and device information. This data may be used to investigate credential disputes or fraud allegations and is retained for the life of the certification.

To Communicate With You

With your consent, we may send you:

You may opt out of non-transactional communications at any time using the unsubscribe link in any email or by contacting us directly. Opting out does not affect transactional messages related to your active enrollment or certification status.

Continuing Medical Education (CME/CEU) Data

Current Status

AAEME is in the process of obtaining CME/CEU accreditation through approved third-party accrediting bodies. The disclosures in this section describe how your data will be handled when CME/CEU credits are offered. This section will be updated as accreditation is confirmed.

Mandatory Data Sharing for Credit Issuance

When CME/CEU credits are offered through AAEME, we are required to share learner completion data with the applicable accrediting body or bodies in order to issue and track credits. This data sharing is a legal and contractual requirement of credit issuance and cannot be opted out of by learners seeking to receive CME/CEU credit.

The data shared for this purpose includes your name, NPI number, course or activity completion date, and the number of credits earned. This information is reported to applicable accrediting bodies and, where required, to relevant state medical boards through established reporting systems.

AAEME works with accredited third-party CME/CEU administrators rather than maintaining direct accreditation. Those administrators are responsible for reporting to their respective accrediting bodies. Their data handling practices are governed by their own privacy policies, which you will receive at the time of enrollment in any CME/CEU-eligible activity.

Record Retention for CME/CEU

In compliance with applicable CME/CEU accreditation requirements, learner records related to continuing education activities (including participation dates, course or activity titles, and credits awarded) will be maintained in our secure learner database for a minimum of six years from the date of course completion. These records are retained to facilitate credit verification and transcript requests and may be accessed by you at any time upon request.

Systems Used for CME/CEU Data Processing

Learner data related to CME/CEU activities is processed through the following types of secure systems to ensure educational integrity and accurate credit reporting:

Fees for CME/CEU Certificate Processing

While certain educational content may be provided at no cost, a nominal administrative fee may be required for the processing and issuance of formal CME/CEU certificates. All financial transactions are processed via secure, PCI-compliant payment processing systems. No fee is charged for accessing course content itself. Fees apply only to the formal issuance of credit documentation where applicable.

Artificial Intelligence: How We Use It and How We Don't

Plain English Summary

No AI decides whether you pass or fail. No AI generated your course content. Your certification is based on your exam score measured against a fixed answer key. Nothing more.

No AI Decision-Making on Certifications

AAEME does not use artificial intelligence or automated decision-making systems to evaluate your performance, determine your certification eligibility, or make any decision that affects your credentials. Certification decisions are based entirely on your exam score as measured against a fixed passing threshold. Exam scoring is performed automatically using a fixed answer key. This is automated calculation, not AI judgment.

No algorithm, machine learning model, or AI system will determine whether you pass or fail a AAEME certification exam. A human being can review any exam result upon request.

No AI Generation of Course Content

AAEME course content is developed by practicing physicians with clinical expertise in impairment rating methodology. We do not use AI tools to generate, summarize, or modify course content. The curriculum you receive reflects human clinical knowledge.

Website and Administrative Use

We may use AI-assisted tools for internal administrative functions such as drafting communications or analyzing aggregate site performance data. These uses do not involve processing your personal or professional data in ways that affect your rights or certification status.

Third-Party AI Tools

Some third-party platforms we use may employ AI or automated analysis in their own operations:

We do not use AI-powered advertising, behavioral targeting, or predictive profiling on aaeme.com or in our communications with you.

Your Rights Regarding Automated Processing

Under GDPR, you have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. As stated above, no such automated decisions are made at AAEME. If this changes, we will update this policy and provide appropriate opt-out mechanisms before implementation.

For users in the EEA and United Kingdom, we process your data under the following legal bases:

Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing that occurred before withdrawal.

How We Share Your Information

State Regulatory Authorities

We share NIRSAT™ certification data with the State of Nevada as required by NV Rev. Stat. 616C.110. This is a legal obligation and cannot be opted out of by Nevada physicians seeking certification. As other states adopt impairment rating certification requirements, we may be required to report to additional state agencies and will update this policy accordingly.

CME/CEU Accrediting Bodies

When CME/CEU credits are offered, we share the minimum necessary learner completion data with applicable accrediting bodies as described in the Continuing Medical Education section above. This sharing is a requirement of credit issuance.

Service Providers

We work with a limited number of third-party service providers who assist in delivering our courses, processing payments, administering exams, and managing our physician database. These providers are contractually prohibited from using your data for any purpose other than the services they provide to AAEME, are required to maintain appropriate security measures, and are not permitted to sell or monetize your data. We describe these providers by function:

No Sale of Data

AAEME does not sell, rent, or trade your personal or professional data to any third party for marketing or commercial purposes. This applies to both personal data and professional data. Ever.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of AAEME's assets, your data, including your certification and CME/CEU records, will transfer to the acquiring entity. You will be notified of any such transfer and your rights under this policy will be maintained by the successor entity.

Your certification records are permanent professional credentials. They will be maintained in perpetuity regardless of any change in AAEME ownership, because they may be needed for legal or regulatory verification at any point in your career.

Payment Card Information

All payment card data is processed directly by our payment processor and is subject to Payment Card Industry Data Security Standards (PCI-DSS). AAEME does not store, transmit, or have access to your full card number, CVV, or PIN. We retain only the last four digits of your card number and your billing address for record-keeping purposes.

Cookies and Tracking Technologies

We use cookies and similar technologies on aaeme.com for the following purposes:

A full Cookie Policy is available at aaeme.com/cookie-policy. You may manage cookie preferences at any time through the cookie consent tool on this site.

Data Retention

Certification Records

Retained permanently. These records exist to support credential verification that may occur at any point in a physician's career, including in legal proceedings that arise years or decades after certification.

CME/CEU Records

Retained for a minimum of six years from the date of course completion, in compliance with applicable accreditation requirements, to facilitate credit verification and transcript requests.

Account and Course Data

Retained for the life of your account plus seven years after your last interaction with AAEME.

Payment Records

Retained for seven years in accordance with IRS requirements.

Marketing Data

Retained until you unsubscribe or request deletion.

Exam Integrity Data

IP addresses, device data, and session logs captured during exam administration are retained for the life of the associated certification and seven years thereafter.

Data Security

We implement industry-standard technical and organizational security measures including encrypted data transmission (HTTPS/TLS), access controls limiting data access to authorized personnel only, regular security reviews of our systems and service providers, and data minimization practices that limit collection to what is necessary for the stated purposes.

In the event of a data breach that affects your rights and freedoms, we will notify you and the applicable regulatory authorities as required by law.

International Data Transfers

AAEME is based in the United States. If you access our services from outside the United States, your data will be transferred to and processed in the United States. For EEA and UK users, we rely on Standard Contractual Clauses (SCCs) as the legal mechanism for international data transfers where required.

Your Legal Rights

Rights Under GDPR (EEA and UK Users)

If you are located in the European Economic Area or United Kingdom, you have the following rights:

To exercise any of these rights, contact us at support@aaeme.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

Certification and CME/CEU records cannot be deleted upon request, as they constitute official professional credentials and accreditation records that may be required for verification in legal or regulatory proceedings.

Rights Under CCPA (California Residents)

California residents have the right to know what personal information we collect, request deletion (subject to certification and CME/CEU record retention exceptions), opt out of the sale of personal information (AAEME does not sell data, so this right is automatically satisfied), and the right to non-discrimination for exercising these rights. To exercise your CCPA rights, contact us at support@aaeme.com.

Rights for All Users

Age Restrictions

AAEME courses and certification programs are intended exclusively for licensed healthcare professionals. We do not knowingly collect data from individuals under the age of 18. If we become aware that a minor has registered, we will delete their account and data immediately. Contact support@aaeme.com if you believe a minor has created an account.

aaeme.com may contain affiliate links to third-party websites. AAEME is not responsible for the privacy practices of any third-party site. Affiliate links are clearly identified on the pages where they appear. No personal data about you is shared with affiliate partners as a result of clicking a link. We encourage you to review the privacy policy of any external site you visit.

Data Protection Contact

American Academy of Expert Medical Evaluators (AAEME)

Email: support@aaeme.com

Contact form: aaeme.net/support

We aim to respond to all privacy inquiries within 5 business days and to fulfill all formal data rights requests within 30 days. EEA and UK users who are not satisfied with our response may contact their local data protection supervisory authority. A directory of EEA supervisory authorities is available at edpb.europa.eu.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will post the updated policy with a new effective date, notify registered users by email if changes materially affect how we use their data, and provide a 30-day notice period before material changes take effect for existing users.

Your Acceptance of These Terms

By creating an account on aaeme.com, registering for a course or exam, or submitting information through any AAEME form, you acknowledge that you have read, understood, and agree to this Privacy Policy. You further confirm that the personal and professional information you provide is accurate.