Data security and HIPAA
How EasyMindCare protects client data with AES-256 encryption in transit and at rest, a signed BAA, audited servers, and audit logs on sensitive records.
Encryption at rest and in transit
All client data is encrypted in transit and at rest using strong, industry-standard encryption (AES-256).
This protects records whether they are moving between your device and our servers or stored in the database.
HIPAA and the Business Associate Agreement
EasyMindCare is built to support HIPAA-compliant practices. We provide a Business Associate Agreement (BAA) so your use of the platform meets your obligations.
We never access your client data without explicit permission. Review the HIPAA overview and BAA pages for the full details.
Infrastructure and audits
Our infrastructure is hosted on HIPAA-compliant servers with regular security audits and monitoring.
Audit logs help track activity so you can see what changed and when across sensitive records.
Your responsibilities
Security is a shared effort. Use strong, unique sign-in methods, review active sessions regularly, and limit access to authorized team members only.
See the account security guide for the protections available on your account.
Learn more
Related guides
Keeping your account secure
Use passwordless sign-in like Google or magic links, pick strong unique passwords, review your active sessions, and know what to do if something looks wrong.
Exporting your data
You own your records. Export clients, notes, and practice data in standard formats like CSV, PDF, and JSON at any time, with no export fees.