Data security and HIPAA
How EasyMindCare protects client data with encryption, a BAA, and audited infrastructure.
Encryption at rest and in transit
All client data is encrypted in transit and at rest using strong, industry-standard encryption (AES-256).
This protects records whether they are moving between your device and our servers or stored in the database.
HIPAA and the Business Associate Agreement
EasyMindCare is built to support HIPAA-compliant practices. We provide a Business Associate Agreement (BAA) so your use of the platform meets your obligations.
We never access your client data without explicit permission. Review the HIPAA overview and BAA pages for the full details.
Infrastructure and audits
Our infrastructure is hosted on HIPAA-compliant servers with regular security audits and monitoring.
Audit logs help track activity so you can see what changed and when across sensitive records.
Your responsibilities
Security is a shared effort. Use strong, unique sign-in methods, review active sessions regularly, and limit access to authorized team members only.
See the account security guide for the protections available on your account.