AdministrativeWritten privacy and security policies, with least-privilege access to health data
PhysicalHosted in access-controlled cloud data centers
TechnicalEncryption at rest (AES-256) and in transit (TLS 1.2 or 1.3), access controls and access logging
Service ProvidersProviders that help us run SmartCemic work under confidentiality agreements
Breach NotificationIncident response and breach notification procedures are in place
Daily BackupsAutomated daily backups of your data
We never sell your health data. Your rights to access, correct, delete and export your data are described in our Privacy Policy.