Carepak IconCarepak

Data & Security Safeguards

Security & Compliance Standards·HIPAA Compliant
Security Protection Status: Platform security monitoring and automatic threat-detection audits run continuously. All database logs are synchronized and fully operational.

1. Encryption Standards (Rest & Transit)

Carepak enforces cryptographic controls to secure clinical records from unauthorized extraction or disclosure.

AES-256 Encryption at Rest

All clinical databases, diagnostic reports, patient profiles, and billing ledger databases are encrypted on disk using standard AES-256 algorithms. Cryptographic keys are managed securely.

TLS 1.3 Encryption in Transit

All platform web traffic, machine connections, and notification dispatches utilize HTTPS with secure TLS 1.3 protocol handshakes to eliminate man-in-the-middle sniffing risks.

2. HIPAA & GDPR Compliance Safeguards

To assist clinics and diagnostic networks in remaining compliant with national healthcare regulations, Carepak incorporates specific technical features:

  • Access Control & Privilege Levels: Restrict workspace permissions strictly based on clinic roles (e.g. lab techs have access to checklist records, pathologists can sign off, and administrators handle billing records).
  • Immutable Action Auditing: Recording access history entries for all files containing Protected Health Information (PHI). We log who accessed, updated, or printed patient files.
  • Automatic Sign-Off Controls: Terminating idle administrator dashboards automatically to prevent data exposure on clinical terminals.
  • Data Minimization: Limiting PHI transmission across APIs to the absolute bare minimum required to satisfy the diagnostic integration.

3. Infrastructure & System Backups

Carepak is hosted in ISO 27001, SOC 2 Type II certified cloud datacenters (AWS / Google Cloud) utilizing multiple redundant availability zones to guarantee platform availability.

We execute hourly transactional database snapshots and perform nightly full-system backups. Backups are stored in write-once-read-many (WORM) cloud environments across separate geographic regions, safeguarding records from local server failures.

4. Machine & Diagnostic Data Integrity

Connecting laboratory analyzer machinery directly to cloud databases introduces potential diagnostic integrity risks. Carepak mitigates these risks using strict pipeline verification controls:

  • Barcode Verification checks: Before importing numeric measurements from analyzers, the platform matches specimen barcode profiles with patient identifiers.
  • HL7 / FHIR Standards: Utilizing HL7 messaging schemas to isolate and parse analyzer data cleanly without custom manual mappings that invite errors.
  • Double-Blind Pathologist Queue: Restricting diagnostic summaries from being published until double-blind verification tasks are executed and pathologists sign off.

5. Secure & Encrypted Notification Links

Ditching traditional, unencrypted email files is essential to protect patient records. When Carepak dispatches reports to patient phone numbers via WhatsApp or SMS, we implement a secure notification model:

  1. Encrypted URL Hash: A unique, one-time URL is generated automatically on report approval.
  2. Patient PIN Verification: The patient enters secure details (e.g. biological birth year) to verify identification.
  3. Secure Container rendering: The PDF report is decrypted inside the secure browser session and is not indexed or saved on public networks.
Cookie icon
We’re using cookies!What does it mean?