Security
Looking for something more?
We have listed only the primary services on our website. You can find a detailed list of our services in our file portal while uploading a case. If you like to send us the custom instructions before uploading a case, please click here to email us.
Network and Portal Security
Data Hosting and Storage: We have our proprietary secure file upload portal for file transfer. All your data will be hosted in the Amazon Web Services (AWS) facilities (us-east-1) in the USA.
Encrypted Email: All the emails from us are encrypted both at rest and in transit. Encrypted emails are unreadable by anyone other than the intended recipients.
Role-based Permissions: Restricted access to sensitive information to specific users at our firm.
Password Policies: Enforcing strong passwords and regular password resets with our password policy settings.
PCI Obligations: All payments made to us go through Stripe. You can find the details about their security setup and PCI compliance at Stripe's security page.
Employee Security Features
- Training: All employees complete HIPAA compliant and information security practices training annually.
- Permissions and Authentication: Access to medical records is limited to authorized employees who require it for their job.
- Policies: Medsum Labs has developed a comprehensive set of security policies that are updated frequently and shared with all employees.
- Employee background check: Medsum Labs performs background checks on all new employees in accordance with local laws. The background check includes employment verification and criminal checks.
- Confidentiality: All employee contracts include a confidentiality agreement.