Infrastructure security
- Remote access MFA enforced
- Remote access encrypted enforced
- Network segmentation implemented
Compliance
- HIPAA
- Penetration Test
Resources
HIPAA
- Business associate agreement (template) Opens in a new tab
- HIPAA readiness assessment report On request
- HIPAA risk analysis (summary) On request
- HIPAA compliance policy On request
Security
- Penetration test report On request
- Incident response plan On request
- Business continuity and disaster recovery plan On request
- Access control policy On request
Privacy and data
Controls
Last reviewed September 29, 2026Organizational security
- Security awareness training implemented
- Code of Conduct acknowledged by employees and enforced
- Confidentiality Agreement acknowledged by employees
Product security
- Penetration testing performed
- Vulnerability and system monitoring procedures established
- Control self-assessments conducted
Internal security procedures
- Continuity and Disaster Recovery plans established
- Continuity and Disaster Recovery plans tested
- Incident response policies established
Data and privacy
- Data retention procedures established
- Data classification policy established
- Organization data deleted upon leaving
Subprocessors
- Google Cloud • Cloud provider
- Crunchy Data • Database provider
- OpenAI • Artificial intelligence
- Amazon Web Services • Cloud provider