Security
How we protect your data and maintain the integrity of our platform.
Our Commitment to Security
Protecting your data is a priority. We build on reputable, security-focused infrastructure and apply sensible technical controls across our platform.
All data is encrypted in transit and at rest. We do not process Protected Health Information (PHI).
Data Encryption
Encryption in Transit
- Data transmission is secured with modern TLS encryption
- All application traffic is served over HTTPS
- Database connections use encrypted channels
Encryption at Rest
- Stored data is encrypted at rest by our infrastructure providers
- Sensitive credentials, where stored, are encrypted
- Backups are encrypted
Authentication & Access Control
Authentication
We use a managed authentication system, which provides:
- Multi-factor authentication (MFA)
- Sign-in with trusted OAuth providers
- Session management and automatic timeout
- Protections against brute-force attacks
Row-Level Security (RLS)
Our database uses Row-Level Security policies so that:
- Users can only access their own data and authorized resources
- Access follows the principle of least privilege
- Data is isolated between organizations and users
Infrastructure
We host our platform with established cloud providers that maintain SOC 2 compliance for their infrastructure (such as our hosting and database providers). At the platform level, our providers offer DDoS mitigation and a web application firewall. We do not represent that Tendral itself holds a formal security certification.
Privacy & No PHI
Our platform is for healthcare market research and does not collect, process, or store Protected Health Information (PHI). We are based in the United States and handle personal information in line with applicable U.S. privacy laws. For details on what we collect and how we use it, see our Privacy Policy.
User Security Best Practices
To help keep your account secure, we recommend:
- Using a strong, unique password for your account
- Enabling multi-factor authentication
- Reviewing your account activity periodically
- Keeping your browser and devices updated
- Reporting suspicious activity to our security team
Security Contact
If you have security concerns or wish to report a vulnerability, please contact us at:
Email: security@tendralhealth.com