Book a demo
checkup.care/Legal/Security
Security

Security at checkup.care

Your health data is sensitive and deserves the highest level of protection. We follow industry-leading security practices to safeguard your information.

EncryptionEncryption for data in transit and at rest across the platform
InfrastructureCloud infrastructure with automated backups and redundancy
MonitoringContinuous security monitoring and threat detection
ComplianceDesigned around HIPAA, GDPR, and local healthcare regulations
Framework

Our Security Framework

Data Encryption

Data is encrypted using strong, industry-standard algorithms. We use TLS for data in transit and maintain secure key-management practices so your personal and medical information is protected at every stage.

  • AES-256 encryption for data at rest
  • TLS for secure data transmission
  • Encryption of sensitive communications
  • Regular key rotation and management

Access Control & Authentication

We implement strict access controls so that only authorized people can access sensitive data, following the principle of least privilege.

  • Multi-factor authentication (MFA) support
  • Role-based access control (RBAC)
  • Regular access reviews
  • Principle of least privilege

Infrastructure Security

Our infrastructure runs on secure, scalable cloud platforms with multiple layers of protection.

  • Redundant systems and automatic failover
  • Distributed backups
  • DDoS protection and mitigation
  • Firewalls and intrusion detection
  • Periodic security testing

Regulatory Alignment

We design our practices around international and local healthcare data-protection regulations.

  • Practices aligned with HIPAA principles
  • Designed to meet GDPR requirements
  • Controls informed by SOC 2 and ISO 27001 frameworks
  • Local healthcare regulation considerations

Monitoring & Incident Response

We maintain continuous security monitoring and have a process for responding to security incidents.

  • Continuous monitoring and alerting
  • Threat detection
  • Defined incident-response process
  • Detailed logging and audit trails
  • Post-incident analysis and improvements

Team Security

Our team follows security best practices and operates on a need-to-know basis.

  • Security awareness training
  • Confidentiality agreements
  • Need-to-know access
  • Ongoing compliance practices
Responsible disclosure

Security Vulnerability Disclosure

We take security vulnerabilities seriously. If you discover a vulnerability in our systems, please help us maintain the highest standards by reporting it responsibly.

  • Email security concerns to: security@checkup.care
  • We aim to acknowledge reports within 24 hours
  • We keep researcher identities confidential upon request
  • Please do not publicly disclose vulnerabilities before we can address them
  • We appreciate and recognize responsible disclosure
Standards

Standards & Frameworks We Follow

Our security program is designed around recognized industry standards and frameworks.

SOC 2 PrinciplesControls informed by the SOC 2 security and availability criteria
HIPAA-AlignedPractices designed around HIPAA safeguards for health information
GDPR-ReadyBuilt to support GDPR data-protection requirements
ISO 27001 FrameworkInformation-security practices informed by ISO 27001
Modern TLSUp-to-date TLS encryption for secure data transmission
Secure PaymentsPayments handled by PCI-DSS-compliant payment processors

Have Security Questions?

Our team is ready to discuss your concerns and share more about our security practices.

Contact Security Team

Other policies

PrivacyPrivacy PolicyWhat we collect, how we use it and your rights.TermsTerms & ConditionsThe agreement for using the checkup.care platform.BillingCancellation & Refund PolicyFree trial, yearly plans, cancellations and refunds.