Legal

HIPAA & BAA

Index contains no member data. Cabinet stores completed medication forms, with HIPAA controls on by default.

• We do not store the inbound member id. We tokenize it and mint a UUID member_id.
• Items are encrypted at rest (pwenc1).
• Tenant isolation and audit are in the API, not this website.
• A BAA must be accepted before Cabinet is enabled. The $99 Launch plan does not include Cabinet.
• This website never holds Cabinet bodies or raw member ids.

Read the Business Associate Agreement. You accept it at checkout when you attach Cabinet. Questions: contact us.