We are committed to protecting your data. We keep your information secure with enterprise-level security standards and compliance audits.
Juvonno uses Amazon Web Services (AWS) for data hosting. AWS data centers have 24x7 security monitoring, biometric scanning and video surveillance. They are also SOC 1, SOC 2 and SOC 3 certified.
All data transfers between users, patients, and Juvonno are secured using Transport Layer Security (TLS 1.3) and industry-standard encryption. Additionally, customer data is encrypted at rest using the AES-256 standard.
All personnel are expected to follow established security policies, including guidelines on information security, data privacy, and password compliance. We maintain strict data security policies to ensure acceptable use and safeguard sensitive information.
We have a robust incident response process to promptly identify, contain, and resolve security incidents. Our team ensures swift action to mitigate risks and protect sensitive data while maintaining compliance with applicable regulations.
Our clinic software ensures secure and seamless access with industry-leading Identity Management. Users log in with a username, password, and optional Two-Factor Authentication (2FA) for extra protection.
All user actions are tracked and tied to individual accounts for transparency and accountability, while data is encrypted in transit and at rest to meet the highest security standards.
We have secure development and change management practices to maintain control over our system development processes. Our stringent policies ensure code quality and security.
We perform daily backups using AWS Backup. AWS Backup is a fully managed service that centralizes and automates data protection across AWS services and hybrid workloads. It provides core data protection features, ransomware recovery capabilities, and compliance insights and analytics for data protection policies and operations. These backups are automatically retained for 35 days and regularly tested, ensuring data integrity and swift disaster recovery.
We continually monitor our system performance and have automated alerts to ensure a quick response to any service interruptions.
We use the following sub-processors:
Juvonno is dedicated to ensuring that all patient and user personal data is treated in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the EU’s General Data Protection Regulation (GDPR). Canadian patient data is stored solely on our Canadian AWS infrastructure.
See our privacy policy here.
If you have any questions that weren’t answered above, please feel free to reach out to our team at hello@juvonno.com and we’ll get back to you as soon as the best person for your question is available.