Security & Privacy
Built for data that matters.
Althio runs on HIPAA-eligible infrastructure. Here is exactly how we protect data today, and what we’re still building toward.
Encryption in transit and at rest
All data is encrypted with TLS in transit and AES-256 at rest. Encryption keys are managed separately from application data.
Access controls
Access to patient data is role-based and scoped to what each team member actually needs to do their job. Every access event is logged.
Infrastructure
Althio runs on HIPAA-eligible cloud infrastructure, with isolated environments for each deployment.
Data handling & retention
We collect only what is needed to support continuity of care, and retain it according to each practice’s agreed policy. Data is never sold, and is never used to train external models without explicit consent.
Compliance roadmap
We are actively working toward SOC 2 and formal HIPAA compliance certification. In the meantime, we’re happy to walk your security team through our current practices in detail.
Have security questions?
Our team can walk you through our current practices and roadmap in detail.
Talk to us