Security
How we protect your patients' data.
Encrypted everywhere, hosted on AWS in the US, and every staff member only sees what their role allows. Every view and change is logged.
Audit logToday
JKJenna Kim viewed Maria Lopez's chartNurse9:31
SRSam Rivera moved David Kim's visitFront desk9:20
LBDr. Laura Bennett signed a visit noteProvider10:54
Adam Fletcher was signed out after inactivityBilling11:02
Encrypted · AWS US
How it works
Protected in storage, in transit and at sign-in.
Your dataEncrypted and backed up.
Encrypted in transitEvery connection uses TLS.
Encrypted at restStored data is encrypted with AES-256.
Hosted on AWS in the USPatient data always stays in the US.
Backups and recoveryRegular backups and a plan to restore service.
AccessThe right people, and only them.
Role-based permissionsEach staff member sees only what their role allows.
Two-factor sign-inA second step to confirm it's really them.
Automatic sign-outIdle sessions end on their own.
Audit logsA record of who viewed or changed patient data.
People and processA team that knows the rules.
HIPAA refresher sessionsOur team takes part in HIPAA refresher sessions.
Incident response planA written plan for what to do if something goes wrong.
BAAs all aroundWith every clinic, and with AWS, OpenAI and our other vendors.
Security questions?Ask us anything about how Ace protects patient data, or request our BAA.
contact@acehealth.site