Security and Privacy

​

​We take our security and privacy seriously, and so have implemented the following policies and controls:

• We limit access to data and resources based on legitimate business need, to reduce risk while maintaining efficiency. 

• All customer data is stored securely in the cloud, encrypted both at rest and in transit with gold-standard encryption.

• Automatic vulnerability scanning in our systems means that we are always up to date on new risks, and address them accordingly.

• All employees are required to perform security training, covering common types of cyberattacks, data best practices, and more. 

• Any vendors who will handle customer data are subject to the highest standards of compliance, including SOC 2 and/or HITRUST.