How is patient data encrypted?
Multiple encryption layers protect patient data:
- At rest - AES-256 encryption on all databases and file storage
- In transit - TLS 1.3 between browser and servers, and between Formisoft and all third-party services
- Passwords - hashed with bcrypt (10+ salt rounds)
- Form passwords and API tokens - cryptographically secured