Every architectural choice we make starts with one question: would I trust this with my own mother's chart?
Administrative, physical, and technical safeguards. BAAs available on Business+.
Subject access, deletion, and portability built-in. EU residency on Enterprise.
Audit underway with a Big 4 partner. Report available under NDA late 2026.
Information security management system roadmap.
Aligned to Dubai Health Authority data residency rules.
The six controls every MeadyCare tenant gets — at every price tier.
Every row carries a tenant_id. Postgres row-level security enforces it on every read and write — even for our admins.
TLS 1.3 in transit. AES-256 at rest. Signed URLs for attachments. Secrets in a managed vault, never in code.
Who did what, to which record, when, from which IP. Exportable. Immutable. Always on.
Granular roles per tenant: superadmin, company admin, caregiver, family. Least-privilege by default.
GCC by default. EU and UK regions available on Enterprise. Custom residency on request.
Point-in-time recovery to any second in the last 7 days. Full daily backups retained 30 days.
Privacy Policy, Terms of Service, Data Processing Addendum, and Business Associate Agreement available on request.
Status page: all systems operational. We publish incidents publicly within 24 hours.