Trust & Security

Security You Can Trust.
So You Can Focus on Impact.

We protect your data with enterprise-grade security, compliance, and transparency.

🛡
HIPAA
Ready
✓
42 CFR
Part 2 Ready
●
SOC 2
Aligned
★
GDPR
Aligned
🔒

Our Commitment to Security

🔒

Encryption

Data encrypted in transit and at rest.

🔐

Access Controls

Role-based permissions and least privilege.

📜

Audit Trails

Every user action is tracked and immutable.

🗂

Data Ownership

You own your data. Always.

🏢

Secure Hosting

U.S.-based redundant infrastructure.

🔄

Regular Updates

Continuous patching and threat monitoring.

🛡

Program Isolation

Every program's data is fully isolated.

🔑

SSO & MFA

Connect your identity provider. Require MFA.

🛡

Transparency. Accountability. Reliability.

We're committed to the highest standards so you can serve with confidence.

Learn More About Security →
👥
Independent Audits
Regular third-party security assessments
✓
Compliance Monitoring
Ongoing monitoring to maintain compliance
☁
Disaster Recovery
99.9% uptime with automated backups
🌐
Data Residency
U.S.-based with regional redundancy
🎧
24/7 Monitoring
Around-the-clock threat detection

Compliance Posture

Compliance is a posture maintained over time, not a checkbox. We're transparent about where each framework stands.

HIPAA-ready deployment

Administrative, physical, and technical safeguards aligned to the HIPAA Security Rule. Per-tenant Business Associate Agreements available for eligible deployments. Patient and client data segmented at the database level.

42 CFR Part 2 support

Substance use disorder records protected with a full consent lifecycle and disclosure logging on every read or share. The system enforces the rules; it doesn't just remind your team to follow them.

HMIS-aware reporting

Schema and reporting designed to align with HUD HMIS Data Standards. Annual Performance Report generation. Forty-plus HUD data elements tracked. Configurable per Continuum of Care.

GDPR & privacy alignment

Consent management with full preference history. Right-to-be-forgotten erasure workflow with audit trail. Data portability through standardized exports.

SOC 2 controls aligned

Architecture aligned to SOC 2 Trust Services Criteria. Formal certification work in progress. Customer-facing security questionnaires available on request.

Federal funder reporting

Templates for major federal sources with internal QA validation, narrative drafting, and submission tracking from draft through accepted.

Have a security question?

Talk to our team. We're built to support your security, privacy, and compliance review — with answers, not deflections.

Switching from legacy software? Our AI-assisted migration is often free. We confirm scope and any cost before you commit. Learn about Migration →