- Encryption
- In transit and at rest
- Access
- By role
- Audit trail
- Every view and change
- Sharing
- Only with consent
Every view and change, on the record
- Viewed: by name, with a reason
- Edited: and the old value is kept
- Consent: recorded before anything is shared
- Refused: a blocked attempt is logged too
- Reviewed: a supervisor signs off the day
What is on for every record
| Safeguard | What it means |
|---|---|
| Encryption | Records are encrypted in transit and at rest. |
| Role-based access | Staff see what their role needs. Admins remove access any time. |
| Audit trail | Every view, change, and refusal is recorded with a name and time. |
| Consent before sharing | Another organization gets a record only after the person agrees. |
| Minimum data | Forms ask only for what the service needs. |
| HIPAA-aligned | Safeguards designed to align with HIPAA. This is not a certification. |
- Encryption
- Records are encrypted in transit and at rest.
- Role-based access
- Staff see what their role needs. Admins remove access any time.
- Audit trail
- Every view, change, and refusal is recorded with a name and time.
- Consent before sharing
- Another organization gets a record only after the person agrees.
- Minimum data
- Forms ask only for what the service needs.
- HIPAA-aligned
- Safeguards designed to align with HIPAA. This is not a certification.
Leave whenever you want
Export any time, in standard formats, without asking us.
Step 1: Export
You take everything, in standard formats.
Step 2: Confirm
We help you move it and check you have it.
Step 3: Delete
We delete our copy as your agreement directs.
No exit fees. No charge to export. We never sell personal information.
Questions security leads ask
Storage
Where is our data stored?
In secure, access-controlled cloud infrastructure, encrypted in transit and at rest. We tell you the specifics during scoping and put them in writing in your agreement.
Compliance
What does HIPAA-aligned mean?
Our administrative, physical, and technical safeguards are designed to align with HIPAA. It is not a certification.
Will you sign a business associate agreement?
Yes. Where health information is involved, we sign one before it enters the service.
Accessibility
Is Decurion accessible?
We design to WCAG 2.2 AA and Section 508, with full keyboard use, AA contrast, screen reader support, and read-aloud at the kiosk.
Compliance
What does HIPAA-aligned mean?
Our administrative, physical, and technical safeguards are designed to align with HIPAA. It is not a certification.
Will you sign a business associate agreement?
Yes. Where health information is involved, we sign one before it enters the service.
Bring your security questionnaire. We answer it in writing.
Book a demo