Your Data is Safe with Wellness Coach

Overview

Your personal health information, individual goals, Care Plan details, blood report information, and progress are private. Your employer/HR will not see this individual-level information. Employers may only receive anonymized, aggregated insights.

Our certifications and compliance standards

HIPAA (Health Insurance Portability & Accountability Act)

We comply with HIPAA, the federal law that sets the standard for protecting sensitive health information. Any personal health data shared through our platform is handled with the highest level of care and confidentiality.

SOC 2 Type II (Service Organization Control 2)

We have completed a SOC 2 Type II audit, conducted by an independent third-party auditor. This certification confirms that our security controls operate effectively over an extended period — not just a point-in-time snapshot.

What this means for you as an employee

Our systems are audited for Security, Availability, and Confidentiality
Access controls, monitoring, and incident response are independently verified
Full audit reports are available upon request under NDA
We undergo annual re-audits to maintain certification
Controls are evaluated against the AICPA Trust Services Criteria

Additional data protection practices

Beyond our certifications, we maintain the following across all operations:

End-to-end encryption for all data transmission (TLS 1.2+)
Role-based access controls — employees only see their own data
Regular third-party security penetration testing
Secure data deletion upon contract termination
No selling or sharing of employee data with third parties, ever

Questions about our security practices?