NikoHealth has SOC 2 Type II, ISO 27001, and meets all HIPAA compliance standards. Check out here
NikoHealth is deployed in a VPC, data is protected from other tenants through network isolation, strict access controls, and compute separation. This ensures that the instance and resources operate in an isolated environment.
Yes, NikoHealth has controls which allow admin users to set and modify permissions per user. We offer an audit log of all activities taken within NikoHealth, which is easily reportable.
The application is hosted in multiple data centers (multiple availability zones) on AWS.
Yes, we will execute BAA at customer request.
Vulnerability scans are performed at least quarterly and penetration testing is conducted annually at minimum. Patch management procedures are in place to address any vulnerabilities identified. Customers are notified promptly in the event of an incident.
