Security

Version: 1.0

Last Updated: August 2026

Security at ABANotes

Protecting customer information is one of our highest priorities. ABANotes is designed with multiple layers of administrative, technical, and operational safeguards intended to support healthcare organizations in protecting electronic Protected Health Information (ePHI).

Secure Cloud Infrastructure

ABANotes is hosted on Amazon Web Services (AWS).

Encryption

Data in Transit

HTTPS/TLS encryption protects communications.

Data at Rest

Where applicable, production storage and backups are protected using encryption technologies appropriate for the underlying services.

Access Control

ABANotes uses:

• Role-based access
• Agency data isolation
• Authentication and session management
• Client assignment controls

Backup Strategy

• Nightly automated backups
• Integrity verification
• Secure off-site storage
• Backup monitoring

Disaster Recovery

Documented disaster recovery procedures support restoration of production services.

Business Continuity

Business continuity planning helps maintain critical operations during disruptions.

Incident Response

ABANotes maintains documented incident response procedures.

Monitoring

Production monitoring includes infrastructure monitoring, threat detection, backup monitoring, and operational alerting.

HIPAA Support

ABANotes supports healthcare organizations operating under HIPAA and offers a Business Associate Agreement for eligible customers.

Responsible Disclosure

Report suspected security vulnerabilities to:

security@abanotes.ai

Related Documents

• Privacy Policy
• Terms of Service
• HIPAA Business Associate Agreement
• AI Use Policy
• Subprocessors