Data Security

• In Transit: All data transmitted between your device and our servers uses TLS 1.3 encryption
• At Rest: Sensitive data is encrypted using AES-256 encryption
• Documents: Uploaded documents are encrypted with unique per-file keys

• Hosted on secure, SOC 2 compliant cloud infrastructure
• Regular security audits and penetration testing
• Automated threat detection and monitoring
• Redundant backups with geographic distribution
• DDoS protection and web application firewall

• Role-based access control (RBAC) for all systems
• Multi-factor authentication for administrative access
• Principle of least privilege enforced
• Comprehensive audit logging of all data access
• Regular access reviews and de-provisioning

We adhere to industry security standards and best practices:

• HIPAA-compliant handling of health information
• SOC 2 Type II certified infrastructure
• OWASP security guidelines
• Regular third-party security assessments

We maintain a comprehensive incident response plan. In the unlikely event of a security incident affecting your data, we will notify you promptly and take immediate action to mitigate any impact.

Your Security Responsibilities

Help us keep your account secure:

• Use a strong, unique password for your account
• Enable two-factor authentication when available
• Keep your devices and browsers updated
• Report any suspicious activity immediately

Contact Our Security Team

If you have security concerns or want to report a vulnerability: