Yes, we are!
Security of your healthcare system and electronic Patient Health Information (ePHI) is our number one priority, so we have gone above and beyond the best practice security and privacy requirements to protect your healthcare data:
Carepatron transmits information securely with multiple layers of high-end encryption.
Carepatron is HIPAA certified.
Your account and passwords are encrypted and only accessible to you.
We use highly secure cloud infrastructure facilities protected by proximity readers, biometric scanners, and security guards 24/7.
We conduct thousands of tests every day to ensure security.
To know more about data, privacy, and security, visit Carepatron Trust Center.
FAQs
How do you monitor vulnerabilities?
Vulnerabilities are identified through automated dependency scanning. Critical issues are prioritized and addressed within 24 to 48 hours to reduce potential risk.
How do you protect against DDoS attacks?
Carepatron protects against distributed denial-of-service (DDoS) attacks using AWS Shield Standard across all resources. CloudFront is used for edge distribution to help absorb and mitigate malicious traffic before it reaches core infrastructure.
Do you conduct privacy impact assessments?
Yes. Data Protection Impact Assessments (DPIAs) are conducted for high-risk processing activities involving personal data, including PHI and PII.
Do you perform penetration testing?
Yes. Carepatron conducts annual third-party penetration testing, with findings remediated based on severity.
Is data encrypted at rest?
Yes. All data stored in Carepatron is encrypted at rest using AES-256, with encryption keys managed through AWS KMS.
Is data encrypted in transit?
Yes. Carepatron enforces TLS 1.2 for all data transmitted between systems.
How would customers be notified in the event of a security incident?
Carepatron maintains a documented incident response process. If a security incident affects customer data, impacted customers are notified without undue delay and within 72 hours where required under GDPR.
Our team will be available to answer any further questions you may have. Just reply via messenger through the Help channel in your workspace.