Security and data protection
What we do to protect your data and your code, and the agreements to ask for before you share anything sensitive. Everything on this page is how we already work.
On every build
Encryption
Client data is encrypted in transit and at rest from day zero, including patient data on the healthcare builds.
Tenant isolation
On multi-tenant platforms, each customer’s data is kept isolated from every other tenant’s.
Access control
Role-based access: people and services get the access their job needs, and no more.
Audit trails
Actions on sensitive records are logged, so you can see who did what and when.
Health data
For US healthcare work we design to HIPAA requirements, and a business associate agreement (BAA) is signed before we touch patient data. For UK patients we design to UK GDPR. HIPAA has no certifying body, so we do not describe ourselves as “HIPAA certified”; we show how a platform is built instead. See the healthcare and telehealth pages for the detail.
Automation in your own cloud
We deploy n8n inside your own private VPC, with role-based access controls, so the automation runs in your environment and not on a shared service.
Your code is yours
You own the code we write for you.
Agreements
Ask for an NDA or a BAA before you share anything sensitive. If you need another agreement, such as a data processing agreement, tell us and we will confirm what we can sign. Contact us.
This website
Analytics and advertising tags on techdome.io load only after you choose. See the Cookie Policy and the Privacy Policy.
Report a security concern
If you found a problem on techdome.io or in something we built, tell us through the contact page and mark it as a security report. We will answer as soon as we can.