How ClinIQ protects clinician, employer, and agency data.

All data is encrypted at rest with AES-256 and in transit with TLS 1.2+. Sensitive fields — clinician contact info, license registry payloads, and message bodies — are additionally encrypted at the column level using pgcrypto with a KMS-held key.

Field-level keys can be rotated without downtime; backups inherit the same encryption.

Every customer table is protected by Row-Level Security policies that scope reads and writes to the authenticated user's company_id and role.

Privileged operations route through SECURITY DEFINER functions that read role membership from a dedicated user_roles table — preventing client-side privilege escalation.

Role-based access with least privilege: owner, admin, member, viewer. Invites are signed, single-use, and expire automatically.

Per-user TOTP MFA enrollment is available in workspace settings. Tenant administrators can enforce MFA for the entire workspace.

Every privileged write — unlocks, exports, role changes, template edits, message sends, suppression-list mutations — is recorded in an append-only audit log with actor identity, IP, and timestamp.

Logs are queryable in-app at /audit and exportable to CSV for downstream SIEM ingestion.

Inbound webhooks (apply submissions, unsubscribes, billing) are verified end-to-end: HMAC signature check, replay-window enforcement, and per-source rate limiting. Invalid payloads return a structured 4xx with no internal state exposed.

Outbound integrations use short-lived credentials stored in our managed secrets vault — never in source control.

All clinician PII (license numbers, full contact details, DOB) is redacted from prompts before being sent to any third-party LLM. Customer data is never used for model training.

AI outputs are advisory; hiring, credentialing, and outreach decisions remain with authorized humans on the employer or agency side.

Underlying infrastructure is SOC 2 Type 2 certified. ClinIQ's own SOC 2 Type 2 audit is on the roadmap; attestation timeline is available under NDA.

Programs aligned with: HIPAA Security Rule (BAA on request), TCPA, CAN-SPAM, CCPA / CPRA. We minimize PCI scope by tokenizing payment instruments through certified processors.

24/7 monitoring with on-call rotation. We commit to notifying impacted customers within 24 hours of confirming a security incident affecting their data, with a written postmortem to follow.

Contact: security@cliniq.com