Security Statement

eCLINIC234 employs several tactics to protect information from theft, misuse, unauthorized access, disclosure, alteration, and destruction.

All eCLINIC234 computer systems are protected by user authentication, firewalls, malware prevention, and intrusion detection.

Information Storage

eCLINIC234 stores information on cloud servers located in locked cabinets within enterprise- class data centers. Information is encrypted at rest using AES 256.

To support the continuous operation of hosted mission critical assets, the data centers have been purpose-built with hardened single-story structures, fully redundant infrastructures, and located in geographic safe zones outside of flood plains. Power is provided by multiple power feeds from separate sources. Multiple carrier-neutral, high-speed internet feeds are used to ensure connectivity.

For access controls the data centers have multiple layers of security, including pre-authorized access, biometric scanning, key fob, anti-tailgating mantraps, and video surveillance to ensure that access is granted only to the appropriate individuals. Access is logged and retained. Each data center is protected and operated by an experienced network operations center (NOC) team.

The data centers undergo external and internal audits against PCI, HIPAA, SOX, JSOX, GLB, NIST 800-53 based controls, SSAE 16, SOC 2 and many more standards. External Type II SSAE 16 SOC 1 and SOC 2 reports are prepared each year.

Payment Card Information

eCLINIC234 does not store, process, or have unencrypted access to payment card information (PHI). Immediately after a user enters the information it is securely transmitted via tokens to the payment card processing provider.

Employee Training

All Updox employees undergo annual training on Updox security procedures, HIPAA privacy & security policies, as well as PCI policies.
Contact Us: If you have any questions regarding this Security Statement or any security concerns please contact us at support@eclinic234.com