Your data security is our top priority.
Enterprise-grade security built into every layer of Careinflux, designed to meet the stringent requirements of healthcare data protection.
HIPAA Compliant
256-bit Encryption
SOC-2 Ready
Stripe PCI Compliant
Security Features
Every layer of Careinflux is designed with security and compliance in mind.
HIPAA Compliance
Careinflux is built to meet HIPAA requirements. We provide a Business Associate Agreement (BAA) to every customer.
Data Encryption
All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Your information is protected at every layer.
Role-Based Access Control
Four distinct roles (Admin, Therapist, Student, Parent) with 22 authorization policies ensuring users only see what they should.
Audit Trail
Every action is logged with timestamps and user attribution. Activity logging provides full accountability across your organization.
Soft Deletes
Records are never permanently destroyed. Soft delete architecture preserves historical data while keeping your active views clean.
Secure Payments
Payment processing powered by Stripe with PCI DSS Level 1 compliance. We never store credit card numbers on our servers.
Data Handling
Where is my data stored?
All data is stored in SOC-2 certified data centers within the United States. Our infrastructure is hosted on industry-leading cloud providers with 99.99% uptime guarantees and geographic redundancy.
How are backups handled?
Automated daily backups are performed with point-in-time recovery capability. Backups are encrypted and stored in a separate geographic region to ensure business continuity in the event of a disaster.
Can I export my data?
Yes. You own your data and can export it at any time in standard formats (CSV, PDF). We believe in data portability and will never hold your information hostage.
Business Associate Agreement
We provide a signed Business Associate Agreement to every customer at no additional cost. A BAA is required under HIPAA when a service provider handles Protected Health Information (PHI) on behalf of a covered entity.
Questions about security?
Our team is happy to walk you through our security practices and answer any compliance questions.