Security & HIPAA
Built to protect the data agencies are trusted with
CareAnchor handles protected health information for home care agencies, so security isn't a feature — it's the foundation. Here is how we protect your agency's and clients' data.
Tenant isolation
Every query is scoped to your agency by database row-level security — one agency can never read another’s data, enforced at the data layer, not just the app.
Encryption
Data is encrypted in transit and at rest. PHI fields with elevated sensitivity are additionally protected with application-level encryption.
Audit logging
Access to protected health information is logged — who viewed which record, and when — so you can evidence compliance.
Access controls
Granular role-based permissions and optional two-factor authentication keep the right data in the right hands.
Managed cloud
Runs on Google Cloud with managed Postgres, private networking, and least-privilege service identities.
EVV & compliance
Electronic Visit Verification, credential-expiry tracking, and state-aggregator readiness are built in.
Business Associate Agreement (BAA)
We sign a BAA with every agency that processes PHI on CareAnchor. Request one at hello@yourcareanchor.com or via our contact page.