MediMobile Messaging software follows the e-PHI (electronic patient health information) security standards. Our data which is at rest is encrypted and our data which is in motion is communicated securely over TLS (transport layer security). MediMobile's datacenter adheres to SOC 2 Type II compliance and is examined and HITRUST certified. We have a 3rd party security firm auditing for HIPAA compliance. We require a BAA (business associate agreement).