US-only AWS regions. No data processed or stored outside the United States.
AES-256 at rest, TLS 1.3 in transit, customer-managed KMS keys available.
Business Associate Agreement available for medical-debt engagements.
Field-level access controls. PII never written to logs. Tokenization available.
On production environments. Measured monthly across all customer deployments.
For Platinum-tier clients and critical P1 incidents: acknowledged within 30 minutes, 24/7.
Daily encrypted backups, cross-region replication, restoration tested quarterly.
All production changes logged. Monthly release notes distributed to clients.
One-click examiner-ready evidence bundle. Covers CFPB, state AG, and client audits.
Want to know more?
Thirty minutes with our team is enough to walk through your specific security and compliance questions — no deck, no sales pitch.