Security
Built to Hold Health Information
Your members and clients trust you with their health information. Here is how Seniorverse protects it, and who owns it: you.
SecurityWhere We Stand
HIPAAA Business Associate Agreement with every customer.
SOC 2 Type IIIndependently audited. The report is available on request.
US HostingYour data is stored in the United States.
Your Data Is YoursYou own it, and you can take it with you.
Controls You Run
Your administrators decide who sees what, and every look at a client record leaves a trace.
Roles and Permissions
Each person gets the access their job needs and nothing more. Administrators set it person by person and change it when a role changes.
- Roles and permissions your organization controls
- Restricted folders for sensitive documents
- Families see only their own family member
- Access turned off when someone leaves
A Record of Who Did What
Every view of and change to a client record is logged: who, what, and when.
- Access to client records logged
- Changes recorded with the person and the time
- Electronic signatures record the signer's email, IP address, and time
Oakview Adult DayCENTER USERS
Search+ Add UserPermissionsTest Permissions
Audit
Who in your organization accessed what. Reads of this trail are themselves recorded.
data_accessReferral packet, A. Reed.pdfmessage_createChat: Referral packet, A. Reedworkflow_reviewRun: Referral intakeloginSessionlogin_failedSessiondata_accessIntake summary, October.xlsxloginSessiondata_accessReferral packet, A. Reed.pdfmessage_createChat: Referral packet, A. Reedworkflow_reviewRun: Referral intakedata_accessIntake summary, October.xlsxdata_accessReferral packet, A. Reed.pdfmessage_createChat: Referral packet, A. ReedPermissions in Seniorverse Day. Each person gets access module by module, and within a module, screen by screen.
The audit trail in Seniorverse Chat. Every sign-in, chat, and file opened is recorded, with the entries that touched client information marked.
Controls We Run
What we do behind the scenes to keep your information safe.
Encryption
Data is encrypted in transit, between your staff's devices and our servers, and encrypted at rest in our databases and file storage.
US Cloud Hosting
Seniorverse runs with established cloud providers in data centers in the United States, not on servers in our office.
Backups
We back up your data automatically, so records can be restored if something goes wrong.
Security Testing
We test our systems for security regularly, including penetration testing, and fix what we find.
Independent Audit
Our controls are audited by an independent firm for SOC 2 Type II.
Our People
Everyone at Seniorverse completes HIPAA and security training and a background check. Company accounts require multi-factor sign-in, and company devices are monitored.
Vendors
Every vendor that handles client information signs a Business Associate Agreement with us.
If Something Goes Wrong
If there is ever a breach involving your data, we notify you, as our Business Associate Agreement requires.
Your Data Is Yours
Seniorverse holds your information so your team can do its work. It never stops being yours.
You Own It
Everything your team puts into Seniorverse belongs to your organization.
Used Only for You
We use it to run Seniorverse for you, as your Business Associate Agreement sets out, and for nothing else. We never sell it, and AI models never train on it.
It Leaves With You
When your agreement ends, we return your data to you or delete it, whichever you choose.
AI and Your Data
Seniorverse's AI is built for health information and is HIPAA compliant.
- Our AI providers are bound by Business Associate Agreements
- The models we use do not train on your data or store it
- AI runs on infrastructure in the United States
- A person reviews what the AI drafts before it goes into a record
Our Trust Center
Policies, controls, and our list of subprocessors, kept current. Ask us for our SOC 2 report or our Business Associate Agreement at security@seniorverse.io.
Questions We Get About Security
Where is our data stored?
In the United States.
Do you sign a Business Associate Agreement?
Yes, with every customer, before any client information goes in.
Who owns our data?
You do. Your data is yours. We use it only to run Seniorverse for you, and when your agreement ends we return it to you or delete it.
Is our data used to train AI?
No. The models we use do not train on your data or store it.
How do our staff sign in?
Everyone signs in with their own account. Your administrators decide who has access to what, and turn access off when someone leaves.
Do you have a SOC 2 report?
Yes, a SOC 2 Type II report from an independent audit. We share it on request.
Report a Vulnerability
If you believe you have found a security problem in Seniorverse, email security@seniorverse.io with what you found and how to reproduce it. Please do not access, change, or keep anyone else's data while testing, and give us a reasonable time to fix the problem before you share it.
Questions About Security?
Ask us anything about how we protect your members' and clients' information.