Loading
How Redacted handles the data your site sends us, and what you can check before you sign up.
Signed at checkout
Where your data is stored
In transit and at rest
Before any event reaches Google or Meta
Every plan includes a business associate agreement, signed at checkout. It covers Redacted. A vendor that handles patient data for you, such as a call tracker, signs its own.
If a breach affects your data, we tell you within the time the BAA sets out.
Redacted sends conversions to Google and Meta from its own servers. Before an event leaves, Redacted removes names, emails, phone numbers, dates of birth and IP addresses.
You get a log of every event that went out and what was stripped from it.
What Redacted records is stored in Redacted's own account on Amazon Web Services (AWS), in its US East region. AWS has signed a BAA with Redacted.
Data is encrypted in transit with TLS 1.2 or higher, and at rest with AES-256, using keys managed in AWS Key Management Service.
Only named Redacted staff can reach customer data. Every account uses multi-factor sign-in, each person has only the access their job needs, and every access is logged.
We use the data your site sends us only to run Redacted for you. We never sell it, and we never use it to train AI models.
The vendors that store or process customer data for Redacted, each under a signed BAA:
Redacted runs a HIPAA security program: a documented risk analysis, written security policies, yearly training for everyone with access, and a designated security official.
Send us your security questionnaire and we'll fill it in. Contact us.
Book a demo and we'll walk through Redacted on your own site.
Prefer to write first? Send us a message.