our Vision
We aim to be a leader in data security, safeguarding customer and patient information through continuous innovation and strict compliance with industry standards.Â
Data Encryption and Access Control
All patient and customer data follows industry standard encryption protocols - both in transit and at rest. We have strict access control measures, including role-based access, to ensure only authorized personnel have access to sensitive data.
Regular Audits and Assessments
We conduct regular audits, vulnerability assessments, and penetration tests to identify and address potential security risks. Throughout our assessment history, zero âhigh risksâ have been identified, and we undergo regular internal risk assessment and mitigation exercises.
Consistent, Robust Employee TrainingÂ
Employees required to undergo regular security and HIPAA trainings, focused on security awareness, responsiveness to security threats, PHI protocols and protections, and internal policies related to cybersecurity and data controls.
Our Core Practices
.svg)
Data Management
We encrypt all data and maintain thorough data backup and disaster recovery plans to ensure data integrity and availability in case of system failures or breaches
.svg)
Secure Development
We leverage secure coding practices and regular security testing throughout the software development lifecycle to prevent vulnerabilities
.svg)
Computer Operations
Customer data is monitored by the Engineering Platform team for completion and exceptions. Infrastructure is maintained in AWS with physical access restricted
.svg)
Physical Security
Our production servers are maintained by AWS, and we regularly review attestation reports and perform risk analyses
.svg)
Monitoring Controls
We deploy continuous monitoring tools and practices to detect and respond to security threats in real-time, with heavy involvement from our senior leadership
The Company We Keep
.svg)
.png)
.svg)