Security & Compliance
At TherapyAppointment, we keep your data secure and your practice compliant so you can focus on your clients.
Your data security comes first
We support stringent HIPAA compliance and security standards to make sure your data is always safe and never sold.
Elevated PHI protection
Our system fully complies with HIPAA and HITECH standards for encrypted PHI transmission and storage of PHI.
Third party vetting
All third party vendors that store, process, access, or manage PHI are required to enter into a HIPAA Business Associate Agreement.
Encrypted data exchange
HIPAA-compliant encrypted record sharing, messaging, and reminders ensure safe communication between your practice and your clients.
North American data storage
All data that is shared with TherapyAppointment is stored and processed in North America, including third party processors.
Real-time backup
Your data is backed up nightly in multiple locations in compliance with HIPAA disaster recovery mandates.
Comprehensive audit trails
Our software includes comprehensive audit trails so you can quickly detect unauthorized access or misuse of records.
24/7 data monitoring
We use a complex system of monitoring, including regular integrity testing, to keep your data safe 24/7.
Third party vetting
We fully vet our partners to ensure they meet compliance requirements and are committed to the same level of protection that we provide.
Validated encryption solutions
We leverage industry validated encryption solutions to protect all data transmitted or stored by our system.
Limited risk of downtime
Our servers and networks leverage redundant designs to maximize availability and limit the risk of application downtime.
Account privacy protection
We require two-factor authentication and 12-character or stronger passwords.
Employee access settings
Job-based roles and permissions let you configure and enforce security and compliance settings for your staff.
Free data storage
Free unlimited data storage allows you to safely store digital records for the legally required amount of time.
Our security and compliance program is designed to protect you and your clients. We respect that your data is your private information and not ours to sell. And we keep it secure using industry-leading tools, processes, and practices.