Patient privacy is our superpower. Zupermicro is HIPAA-compliant, SOC 2 Type II audited and HITRUST r2 certified. Every disclosure is logged for HIPAA accounting-of-disclosures (45 CFR §164.528), and every access to a chart is audited.
- Encryption at rest (AES-256) and in transit (TLS 1.2+)
- Role-based access with break-the-glass verification for chart access
- Annual third-party penetration testing
- Business associate agreements with every client
To report a vulnerability, see our security.txt.