Encrypted
In transit and at rest.
Security
Built for protected health information.
Encrypted. Access-controlled. Logged.
HIPAA
SOC 2 (in progress)
BAA available
Access control
Records stay scoped.
Audit trail
Sensitive access is logged.
Private by default
Teaching flows avoid direct identifiers.
BAA available
For teams and institutions.
Trust center
Security details, all in one place.
Subprocessors. BAA packet. Restore evidence.
Production infrastructure
Google Cloud.
Transactional email
AWS SES. No PHI in email.
DNS and billing
Cloudflare DNS. Stripe billing.