PsychSuite protects clinic and patient data with layered technical, administrative and physical safeguards. This page summarises what is in place, and how to reach us if you believe something is wrong.
- HIPAA-aligned safeguards
- Encrypted in transit and at rest
- Systems monitored 24/7
- Read-only integrations
HIPAA-aligned safeguards
PsychSuite applies administrative, physical and technical safeguards aligned with HIPAA. A Business Associate Agreement (BAA) is available to clinics. See HIPAA & BAA.
Encryption
Data is encrypted in transit (TLS) and at rest. Credentials for connected third-party accounts are stored encrypted.
Access controls and audit logs
Role-based access controls and least-privilege access limit who can see data. Significant actions are recorded in audit logs.
24/7 monitoring
Our systems are monitored around the clock so issues can be detected and addressed quickly.
Read-only marketing integrations
Google and Meta connections are read-only and used only for reporting. They can be disconnected at any time; see How to delete your data.
Subprocessors
See our current subprocessors list.