How is patient data encrypted?

Multiple encryption layers protect patient data:

  • At rest: AES-256 encryption for the database and file storage
  • In transit: TLS 1.2 minimum at the load balancer, TLS 1.3 supported, and database connections require TLS
  • Uploaded files: signed links that expire after 1 hour
  • Passwords: hashed with bcrypt (10+ salt rounds)
  • Form passwords and API tokens: cryptographically secured

Patient data is hosted in AWS us-east-1 in the United States.

Get every patient ready before the visit.

Start with Intake, then add booking, reminders, and payments when you need them.

Cancel anytime · BAA included