SECURITY & PRIVACY DISCLOSURE

Privacy Policy

Our comprehensive policy detailing how we protect Protected Health Information (PHI), enforce HIPAA standards, and safeguard practice data.

Version: v1.8.0
Status: Active
Last Revised: July 10, 2026
SOC2 & HIPAA Compliant

Privacy Policy

Security & Encryption Policies

OfficeSuite takes user privacy and security extremely seriously. We maintain state-of-the-art administrative, physical, and technical safeguards for your data.

1. SOC2 & HIPAA COMPLIANCE

All customer transcripts, recordings, and medical information are encrypted in transit via TLS 1.3 and at rest in our DigitalOcean MySQL servers using AES-256-GCM double-layer security via master key encryption.

2. DIGITALOCEAN CLOUD STORAGE

Uploaded profile pictures, voice recordings, and customer support ticket attachments are stored in secure, private DigitalOcean Spaces containers using unique hashed keys to prevent directory traversal exploits.

3. METADATA COLLECTION

We gather standard operational logs, API load times, and error outputs (e.g. database migration checkpoints) solely to diagnose health concerns and maximize uptime across the containerized monorepo ecosystem.

Enterprise Grade Encryption (AES-256-GCM & TLS 1.3)
Effective as of July 10, 2026