Security & compliance
Patient data, protected by default.
Security is included on every plan. Here is what Life Systems Software does, in plain language.
Security controls
-
HIPAA & BAA
Life Systems Software operates as a business associate. A Business Associate Agreement is included with every plan and signed during onboarding.
Read the BAA summary -
Encryption in transit and at rest
TLS 1.2+ for every connection. Databases, backups, and uploaded documents are encrypted at rest with AES-256 using managed keys.
-
Access controls & audit logs
Role-based permissions, per-user logins, optional SSO, automatic session timeouts, and an immutable audit log of who viewed or changed each record.
-
Backups & uptime
Encrypted backups every day with point-in-time recovery, stored in a second region. We target 99.9% monthly uptime and publish status publicly.
-
Hosting region
Production runs on Microsoft Azure in the United States (West US 2 primary, East US 2 secondary). Patient data does not leave the US.
-
Vulnerability disclosure
Found something? Email support@LifeSystemsSoftware.com. We acknowledge reports within two business days and do not pursue researchers acting in good faith.
Sub-processors
Who else touches data
Vendors that may process customer data on our behalf. We give 30 days' notice before adding one that handles PHI.
| Vendor | Purpose | Location |
|---|---|---|
| Microsoft Azure | Application hosting, databases, storage | United States |
| Twilio | SMS appointment reminders (the reminders add-on) | United States |
| SendGrid | Transactional email | United States |
| Change Healthcare | Claims clearinghouse | United States |
| Stripe | Card payments (tokenised; no card data is stored by Life Systems Software) | United States |
Placeholder list
PLACEHOLDER: Twilio is confirmed — it powers the reminders add-on. The remaining rows illustrate the format; the real list is maintained by the security lead and reviewed quarterly.Need a security questionnaire completed?
Group-plan customers can request our security overview, penetration test summary, and SOC 2 status letter (PLACEHOLDER: in progress) by emailing support@LifeSystemsSoftware.com.