Your Data. Protected. Your Trust. Earned.

CarePoint Solutions is committed to the highest standards of data security, privacy, and regulatory compliance — so your laboratory can focus on what matters most: patient safety.

SOC 2 - Audit in progress

GDPR - Ready

CCPA / CPRA - Ready

Security Built Into Every Layer.

From the infrastructure we run on to the code we ship, security is a first-class requirement — not an afterthought.

Cloud Infrastructure

Hosted on AWS with Multi-AZ deployment across us-east-1 (primary) and us-west-2 (disaster recovery). ECS Fargate for compute, RDS Multi-AZ for databases, and S3 Cross-Region Replication for object storage.

Encryption Everywhere

All data encrypted in transit with TLS 1.2+ and at rest with AES-256 via AWS KMS. Customer data is logically isolated with per-tenant encryption key management.

Monitoring & Incident Response

Continuous monitoring via Datadog APM, CSPM, and synthetic tests. CloudTrail audit logging retained for 36 months. Defined incident response SLAs: P1 acknowledgement within 1 hour.

Secure Development (SDLC)

Every code change passes automated SAST, secrets detection, SCA, and container scanning via Datadog before reaching production. Mandatory peer code review and staging validation on every PR.

Access Control

Role-based access control (RBAC) with least-privilege enforcement. MFA required for all privileged accounts. Quarterly access reviews and immediate de-provisioning upon offboarding.

Business Continuity & DR

RTO of 4 hours and RPO of 1 hour. Automated daily backups with 30-day retention. Disaster recovery runbooks tested annually. 99.9% uptime SLA for production services.