Enterprise-Grade Security
Your patient data security is our highest priority. Learn about the comprehensive measures we take to protect your information.
Encryption In Transit and At Rest
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
Secure Infrastructure
HIPAA-compliant data centers with redundant backups and a 99.9% uptime target.
Access Controls
Role-based access control, multi-factor authentication, and comprehensive audit logs.
HIPAA Alignment
Designed for HIPAA-compliant workflows, with Business Associate Agreements available to all customers.
Built on certified infrastructure
MyMediScribe runs on Amazon Web Services. AWS infrastructure is independently certified to the standards below. These certifications cover the AWS platform we build on; MyMediScribe has not yet completed an independent audit of its own application controls.
SOC 2 (AWS)
AWS infrastructure, independently audited
HIPAA-Aligned
Designed for HIPAA-compliant workflows
HITRUST CSF (AWS)
AWS infrastructure, healthcare security framework
ISO 27001 (AWS)
AWS infrastructure, international security standard
Security Best Practices
Data Encryption
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for data at rest
- Encrypted database backups
- Secure key management using HSMs
Access Management
- Multi-factor authentication (MFA) required
- Role-based access control (RBAC)
- Single Sign-On (SSO) support
- Automatic session timeout
Network Security
- Web application firewall (WAF)
- DDoS protection
- Regular penetration testing
- 24/7 security monitoring
Compliance & Auditing
- Comprehensive audit logs
- Regular security audits
- Third-party vulnerability assessments
- Incident response procedures
Data Protection Measures
Data Isolation
Each organization's data is logically isolated with separate encryption keys.
Redundant Backups
Automated daily backups with geo-redundant storage across multiple data centers.
Activity Monitoring
Real-time monitoring of all system access and data modifications.
Incident Response
24/7 security team with documented incident response and breach notification procedures.
Need More Information?
Request our detailed security whitepaper or schedule a call with our security team.