Our platforms and security infrastructure are designed to protect YOUR data and eliminate unnecessary disruptions to YOUR business. The combination of the best security technologies, regular scanning & testing, audits performed annually on our security program, and HIPAA compliance enables us to protect both you and your data. At nVoq, here is what we do to protect YOUR data...

The nVoq platform undergoes regular, rigorous independent audits in accordance with the AICPA’s SOC2 Type 2 standard, to confirm compliance and safeguarding of client data.

To ensure that the necessary security protocols are in place and function properly, nVoq undergoes a SOC2 Type 2 assessment annually, based on these four Trust Service Principles…

1. Security
2. Availability
3. Confidentiality
4. Privacy

nVoq’s HIPAA compliance is included under its SOC2 Type 2 program, so that it undergoes an independent third-party audit every year, even though having an external audit is not required by HHS.

nVoq goes above and beyond to ensure the safety, security, and privacy of your data.

Additional Security Documentation:

nVoq utilizes advanced monitoring technologies on all levels of our applications and infrastructure. This includes a status page published to the internet for customer access regarding system status and even notification. This information is also available via text or email subscription 24/7 to ensure real-time alerting and response on any issues.

nVoq relies on a multi-tiered, redundant backup strategy to help ensure recovery of archived data. Backup procedures include frequent snapshots of all critical client data to multiple media types and geographically diverse locations.  We test backups regularly to ensure recovery reliability. We encrypt and securely transport offsite data backups to alternate locations.

Your confidence in our ability to manage and protect YOUR sensitive patient data is important to us. We protect our client’s data with a defense in depth approach, that includes powerful underlying technology tools such as:

• Data Encryption for data in Motion and at Rest
• Strong Encryption Technologies
• MFA employed strategically on our platform
• Intrusion Prevention System (IPS)
• Intrusion Detection System (IDS)
• Web Application Firewalls (WAF)
• Network Firewalls
• Virus and Malware Detection & Removal
• Penetration Testing
• Vulnerability Scanning
• Dynamic Application Security Testing (DAST)
• Static Application Security Testing (SAST)
• Software Composition Analysis (SCA)
• Clear, Deep and Dark web monitoring

Clients access our platform environment via encrypted TLS sessions. We encrypt sensitive customer data both during transmission and at rest using the same industry standard protocols used by modern financial institutions.