Security & complianceEnterprise-grade security, built for healthcare.
HIPAA compliant. SOC 2 Type 2 audited. A BAA signed with every customer. Your data is protected by the same standards used by the largest health systems.
Settings/Audit logIllustrative
Audit log
RecordingWhoActionRecordTime
A. ReyesCoordinatorViewed referralReferral 16990039:41 AM
Linear HealthSystemVerified eligibilityReferral 16990039:04 AM
J. ChenCoordinatorUpdated priorityReferral 16990078:52 AM
M. OrtizAdministratorChanged a roleSettings, Members8:30 AM
A. ReyesCoordinatorViewed call transcriptReferral 16989908:12 AM
Role-based accessCoordinator
- Referrals and care gapsView and edit
- Call transcriptsView
- Members and rolesNo access
- Audit logNo access
Encrypted in transit and at rest
Illustrative platform data. The people, records and events shown are fictional.
- HIPAA
- Privacy, Security & Breach rules
- SOC 2
- Type II, audited annually
- AES-256
- Encryption at rest
- 99.9%
- Uptime SLA
Compliance & certifications
Standards healthcare teams trust.
- HIPAA CompliantFull compliance with HIPAA Privacy, Security, and Breach Notification Rules.
- SOC 2 Type 2 AuditedAnnual audits by independent third-party auditors.
- Business Associate AgreementSigned with every customer before implementation.
- Athena Health Marketplace PartnerCertified integration meeting Athena's security requirements.
Data protection
Protected at every layer.
Patient data is encrypted, access-controlled, and fully audited, from the moment it enters our systems.
In transitTLS 1.3
At restAES-256
AccessRole-based
Patient dataAudit trail of every access and change
- Encryption at rest and in transitAES-256 encryption for all stored data, TLS 1.3 for all data transmission.
- Role-based access controlGranular permissions ensure staff only access the data they need.
- Audit loggingComplete audit trail of all data access and system changes.
- Data retention policiesConfigurable retention aligned with your compliance requirements.
Infrastructure security
Built on hardened, HIPAA-eligible infrastructure.
- Cloud infrastructureHosted on HIPAA-eligible cloud infrastructure with a 99.9% uptime SLA.
- Network securityFirewalls, intrusion detection, and DDoS protection.
- Vulnerability managementRegular penetration testing and vulnerability scans.
- Disaster recoveryAutomated backups with tested recovery procedures.
Related documents