Security & Compliance

Your data security is our top priority. Learn about our comprehensive security measures and infrastructure.

Enterprise-Grade Security

MedReveal is built on industry-leading security practices and infrastructure. We employ multiple layers of security to protect your data and ensure platform reliability.

Security Measures

Encryption

All data is encrypted both in transit and at rest using industry-standard encryption protocols.

  • TLS encryption for all data in transit
  • AES-256 encryption for data at rest via AWS KMS
  • Encrypted database backups via AWS RDS

Authentication & Access Control

Multiple authentication options with enterprise-grade security layers.

  • Google Sign-In (OAuth 2.0) authentication
  • AWS Cognito for email/password authentication
  • Email verification required
  • Role-based access control (RBAC)

Infrastructure Security

Hosted on secure AWS infrastructure with enterprise-grade reliability.

  • Amazon RDS database within secure VPC
  • Security groups and network isolation
  • AWS Shield for DDoS protection
  • IAM policies with least-privilege access

Data Protection & Privacy

We handle your data with care and in compliance with data protection regulations.

  • No patient health information (PHI) collected
  • Data minimization - we only collect what's necessary
  • Automated backups via AWS RDS
  • Right to access, export, and delete your data

Monitoring & Incident Response

24/7 monitoring and rapid response to security events.

  • Real-time security monitoring and alerting
  • Comprehensive audit logging
  • Incident response procedures documented
  • Regular security assessments and penetration testing

Compliance & Certifications

HIPAA Compliance Not Required

We do not collect, store, or process Protected Health Information (PHI). All data is de-identified and aggregated pricing information.

Data Privacy Practices

We follow industry best practices for data privacy and are committed to transparency in our data handling procedures.

Infrastructure Certifications

AWS maintains SOC 2 Type II, ISO 27001, and other industry-standard certifications for its cloud infrastructure services.

Responsible Disclosure

We take security vulnerabilities seriously. If you believe you've discovered a security issue in our platform, please report it responsibly.

Security Contact

Email: security@medreveal.com

Please include:

  • •Description of the vulnerability and its potential impact
  • •Steps to reproduce the issue
  • •Your contact information for follow-up questions

We commit to responding to valid reports within 48 hours and working with you to address the issue promptly.

Questions about our security?

We're happy to answer any questions about our security practices, infrastructure, or compliance status.

Contact Security TeamView Privacy Policy