EveryDose Home

Security and Privacy come first. Always.​

Customer trust and data security are the foundation of everything we do at EveryDose. ​

Graphic of a user's hand holding a phone with a lock on it and particles flying off.

We’re committed to doing security the right way​ ​

For Partners

EveryDose helps you increase medication adherence while keeping your data secure and compliant.  When we work with you, we’re a HIPAA covered entity and your business associate. You retain ownership of all data that you share with us, and we protect it in accordance with our contract and BAA.​

For Members

When an individual enrolls in our program through their healthcare provider, we offer our program as a covered entity and business associate to their healthcare provider. We safeguard any protected health information (PHI) in accordance with the requirements of HIPAA, and other industry best practices.​

We go the extra mile to ensure security

Secure Hosting

Our infrastructure runs on Microsoft Azure, ensuring the highest levels of host and network encryption, patch management, physical security, and network security. All data is stored within the United States.​

Encryption

We are committed to ensuring the safety of data, which is why we encrypt data using the latest standards, including AES-256 encryption for data at rest, and requiring TLS/SSL for APIs and application endpoints.  ​

External Assessments

We work with independent security firms and auditors to conduct security reviews and third-party penetration tests every year.  These steps help us to assess our infrastructure for any vulnerabilities.​

Read about a few of our many security features:​

Robust product security​

Within our applications we offer two-factor authentication, password complexity standards, role-based permissions,  and other in-app security features.​

Graphic of a computer connect to a phone via a dotted line. In the middle, there is a lock icon, implying security between the two.
A magnifying glass zooms into a part of a document.

System monitoring and alerting​

Our production application and underlying infrastructure are monitored 24/7/365 days a year.  Any critical alerts generated by these systems are sent to our team immediately.​

Incident response

We have an established protocol and policies for handling security events, including escalation procedures and rapid mitigation steps.​

An open folder with a symbol of a lock on it.
Two IDs laying on top of each other.

Organization-wide security protocols​

Our corporate security measures include annual Security and Awareness training for teammates, background checks in accordance with local laws, and comprehensive security policies.

Interested in learning more?​

Schedule a demo to see how EveryDose can modernize your adherence program​

Let's Talk