CareSync Trust Center
Security for connected care.
A clear view of our controls, deployment options and shared responsibilities — for the people protecting your organization’s data.
At a glance
- HIPAA compliant
- Encryption in transit and at rest
- Saudi hosting options
Security controls
Protection at every layer
Explore the controls and options documented for the CareSync platform. Your selected configuration defines the final implementation.
Access and identity
- Role-based access control by role, branch and service
- Configurable administrative permissions
- Identity and SSO integration where supported by your provider
- Session and account controls
Data protection
- Encryption in transit
- Encryption at rest on managed infrastructure
- Environment separation between configuration and production data
- Data retention controls agreed during deployment
Hosting and residency
- Configurable data residency options
- In-Kingdom hosting options for Saudi deployments
- Dedicated single-tenant deployment option
- Backup and recovery approach documented per deployment
Platform operations
- Activity logging for administrative actions
- Change management through release processes
- Monitoring of platform availability
- Incident response process agreed with the customer
Integration security
- API-based integration with approved enterprise systems
- Scoped credentials per integration
- Integration scope confirmed during discovery
- No integration enabled without customer approval
Regulatory support model
- Architecture built to support PDPL requirements
- HIPAA-compliant safeguards for applicable health information
- Customer retains responsibility for clinical and regulatory obligations
- Deployment documentation provided for internal review
Availability and scope are confirmed during discovery and contracting.
Compliance approach
HIPAA compliant. Built for accountable deployment.
CareSync is HIPAA compliant. Each customer deployment still requires an agreed architecture, operating model and shared responsibilities.
CareSync is HIPAA compliant. Each deployment remains subject to its configuration, customer policies, connected services and documented shared responsibilities. No additional certification or regulatory approval is implied.
Saudi Arabia · PDPL
Architecture designed to support PDPL requirements, with in-Kingdom hosting options scoped for Saudi deployments.
HIPAA compliant
CareSync applies HIPAA-compliant safeguards to protect applicable health information. Deployment scope and customer responsibilities are agreed during contracting.
Security review
Make security part of your rollout
Bring your IT, privacy and compliance stakeholders into the conversation before deployment.
Discuss your security requirements
01
Define requirements
Review your data flows, residency requirements and enterprise integration scope.
02
Review the architecture
Discuss access controls, deployment options, backup approach and operational responsibilities.
03
Agree the scope
Confirm the selected controls, retention rules and incident process for your deployment.
Discuss your HIPAA requirements, selected safeguards and deployment responsibilities with our team.