How We Protect Your Data

HIPAA-Compliant Infrastructure

Hosted on enterprise-grade, HIPAA-compliant cloud infrastructure — the same caliber that powers major health systems worldwide
Business Associate Agreement (BAA) in place — the legal contract required by HIPAA for any service handling protected health information
SOC 2 Type II certified infrastructure — independently audited for security, availability, and confidentiality
End-to-end encryption — data in transit protected by TLS 1.3, data at rest secured with AES-256 encryption

Automated daily database backups — no manual steps, no gaps in coverage
Point-in-time recovery — restore your data to any second within the retention window, not just the last backup
35-day backup retention — over a month of recovery history available at all times
If something goes wrong, we can recover your data to the exact moment before it happened

Backup copies stored in a geographically separate data center — if one region goes down, your data exists in another
If an entire region experiences an outage, your data survives in a separate physical location
Additional encrypted backups on a separate cloud provider — a completely independent copy in a different system entirely
Your data is never in just one place — multiple copies, multiple providers, multiple regions

Every chart edit is logged — who changed it, when, and exactly what was changed
Full before/after history for every modification — complete change tracking for legal defensibility
Charts can be locked after sign-off — reopening creates an auditable record, protecting both patient and provider
Meets medical record-keeping legal requirements for documentation integrity
Nothing is ever truly deleted — soft delete with admin recovery ensures no data is permanently lost

If a server crashes, VIP Scribe automatically spins up a replacement — no waiting on a support ticket
Minimal downtime — your practice keeps running while infrastructure heals itself
No manual intervention required — automated monitoring detects and resolves issues around the clock

You own your data — always exportable, always accessible, no questions asked
No vendor lock-in — standard database formats mean your data works outside of VIP Scribe
Full data portability — if you ever need to move, your records come with you