ico-big-security

Security & Peace of Mind

Hipaa compliance US, Encrypted, Security Cert. Backup. Servers.

Secure

Our network is protected by an enterprise-class firewall and all YellowSchedule plans include SSL encryption to keep your data safe.

Our product software and infrastructure is updated regularly with the latest security patches and our state-of-the-art computer servers are protected by biometric locks and 24-hour surveillance.

Security and peace of mind with YellowSchedule

Photo of a physiotherapist with a patient

Enabling HIPAA Compliance

All US based health care organizations need to be HIPAA compliant. It’s up to each organisation to ensure compliance, there is no such thing as ‘HIPAA Compliant Software’. However software should enable your organisation to fulfil all its obligations in regard to the electronic storage of patient information. YellowSchedule enables our customers to

  • Track who did what
  • Define user roles
  • Ensure data security
  • Ensure maximum ‘up time’ of the system and availability of a backup


Trust

Our customers trust us with their most sensitive data. Our system has specifically been developed to ensure that access to your data is secure, fast, always available and that hardware systems are fault tolerant.

Backup

Your data is safe. We take nothing to chance and have numerous processes in place to protect against any potential dataloss:

  • Secure database replication system.
  • Secure system of data backups.
  • Advanced monitoring systems pre-alert staff if any exceptions occur (memory spikes, high CPU usage etc).
  • All critical devices reside on dual power supply systems.
  • Raid Arrays on Dedicated hardware for safety and performance.
  • Backup and restoration processes are regularly tested.
  • Optimized databases and load balanced servers ensure you’ll never be waiting for your data.
  • Audit history allows users to track changes to client data.

Data Security

Specific security controls ensure that only you have access to your data.

  • SSL SHA256 secures data in transit.
  • Hybrid Dedicated server specification with Dedicated Cisco ASA firewall.
  • Backups and data replication secured to non-public servers.
  • PHI/PII data encrypted at rest (Rijndael AES256 encryption).
  • Controlled access to data.
  • Infrastructure tenancy options available for Enterprise.

Physical Security controls

All data is hosted in secure datacenters with the world leaders in managed hosting. Physical security controls used in the datacenter include:

  • Keycard protocols.
  • Biometric scanning protocols.
  • Around-the- clock interior and exterior surveillance.
  • Access limited to authorized data center personnel, prior clearance and escort required.
  • Thorough background security checks on Data center employees.
  • Best Environmental controls including:
    • N+1 redundant HVAC (Heating Ventilation Air Conditioning) system
    • Advanced fire suppression systems.
    • Every 90 seconds, all air is circulated and filtered to remove dust and contaminants.