Skip to main content
Security

Student data, protected like patient data

EMStriq is HIPAA compliant, and we treat student data the same way we would treat protected health information (PHI). Your program’s data is encrypted with its own specific security key, so your data is never accessible by anyone other than you.

HIPAA compliantYour data is secure
Per-organization keysEnvelope encryption per school
Encrypted at rest and in transitAES-256 at rest · TLS in transit
Full audit trailEvery access logged

How program data is protected

Your own encryption keys

Each program’s records and uploaded documents are encrypted with keys unique to that program, so one organization’s data can never be read with another’s.

Isolation enforced in the database

Access rules live in the database itself, not only in the app, so a request can only ever reach rows its user is allowed to see.

Roles you define

Grant instructors, coordinators, and directors exactly the permissions their job needs, down to individual actions.

Every change on the record

Each action in your organization is written to an activity log you can review, with who did it and when.

Patient privacy by design

Charts are built so students document care without recording patient identifiers, with clear rules on what may be entered.

Hosted in the United States

Application servers, databases, and document storage all run in U.S. data centers.

See what your program would look like

We'd love to show you a live demo of what EMStriq would look like for your program.

Confirm