Security
Security at Prevsi.
The safeguards behind your care: encryption, US cloud hosting and continuous audits.
Safeguards
Encrypted in transit
How your information stays protected
- Encrypted in transitEvery connection between your device and Prevsi uses TLS encryption, so nothing is readable on the way in.
- Encrypted at restStored information is protected with AES-256 encryption at rest and envelope key management.
- Hosted on AWS in the United StatesPrevsi runs on Amazon Web Services cloud infrastructure located in the US, in isolated, hardened environments.
- Access on a need-to-know basisOnly the people and systems involved in your care can reach your information, behind multi-factor authentication.
- Monitored around the clockLogging, alerting and continuous scanning watch our codebase and cloud for threats and misconfigurations.
- Your data is never soldWe collect only what your care requires and never sell or share your information for advertising.
Security safeguards and audited SDKs
Prevsi applies HIPAA safeguards, runs on US cloud infrastructure and isolates clinical screens from third-party widgets. Note: HHS does not recognize private HIPAA certifications.
- HIPAA safeguardsAdministrative, technical and physical safeguards designed for protected health information.
- AWS US infrastructureHosted in isolated US regions on Amazon Web Services cloud infrastructure.
- Audited third-party SDKsZero ad trackers. Support webchat is restricted to public pages and never runs on intake, sign-in or portal screens.
Continuously audited by Aikido
We use Aikido to continuously audit our codebase and everything in our AWS cluster - vulnerabilities, exposed secrets and misconfigurations - so issues are found before they reach you.
Questions about security?
Read the privacy policy for the details, or reach out to support any time.