Security – Compliances
GDPR Compliance
We comply with the General Data Protection Regulation (GDPR) to protect the privacy and personal data of our users in the European Union. This includes:
- Data Protection: Implementing robust security measures to safeguard personal data.
- User Rights: Ensuring users can exercise their rights, such as accessing, correcting, or deleting their data.
- Transparency: Providing clear information about how we collect, use, and store personal data.
SOC 2 Compliance
Our systems and processes are designed to meet the criteria set forth by the Service Organization Control (SOC) 2 standards. This includes:
- Security: Protecting against unauthorized access and data breaches.
- Availability: Ensuring our services are reliable and available when you need them.
- Confidentiality: Safeguarding sensitive information from unauthorized disclosure.
HIPAA Compliance
For our users in the healthcare sector, we comply with the Health Insurance Portability and Accountability Act (HIPAA) to protect sensitive patient information. This includes:
- Privacy Rule: Ensuring the confidentiality of Protected Health Information (PHI).
- Security Rule: Implementing administrative, physical, and technical safeguards to protect PHI.
- Breach Notification Rule: Promptly notifying affected individuals in the event of a data breach.
Regular Audits and Checks
To maintain our compliance with these standards, we undergo regular audits and checks by independent third parties. These audits help us identify and address any potential vulnerabilities, ensuring that we continuously improve our security practices.
By adhering to these compliance standards, we aim to provide a secure and trustworthy environment for our users. If you have any questions or need more information about our compliance policies, please don’t hesitate to contact us.