Trust Center
HIPAA & Security
CareGiverOS is built to support secure handling of sensitive caregiver and health-related information through layered administrative, technical, and operational controls.
Encryption
In Transit + At Rest
Access
Role Based
Monitoring
Audit Ready
1. HIPAA Commitment
We design our platform with HIPAA-aligned controls in mind for workflows that may involve protected health information. That includes limiting access, protecting transmissions, and maintaining accountable operational practices.
HIPAA compliance is not just a product feature. It depends on product configuration, contractual coverage, workforce training, and customer usage practices.
2. Administrative and Technical Safeguards
- Encryption for stored data and encrypted network transport.
- Session protections and controlled authentication workflows.
- Logging and operational monitoring to support troubleshooting and security review.
- Regular review of infrastructure configuration, permissions, and service changes.
3. Access Controls and Minimum Necessary Use
We aim to restrict access according to job function and product role so that internal teams and collaborators see only the information required to perform their responsibilities.
Customers are responsible for assigning access appropriately inside their own organizations and for removing access when it is no longer needed.
4. Infrastructure and Vendors
We use service providers to host, monitor, and support the platform. Providers that may handle regulated data are evaluated for security posture and are expected to operate under appropriate contractual terms.
Where applicable, business associate agreements and data processing terms are used to establish responsibilities for handling sensitive information.
5. Incident Response
We maintain internal processes for investigating suspicious activity, containing issues, assessing impact, and coordinating communication when a security event requires attention.
Questions about security posture or HIPAA readiness can be submitted via our contact form.