Intelibly connects providers to patients. Protecting the information entrusted to us, including protected health information (PHI), is part of how we build and run our Service across intelibly.com and app.intelibly.com.
Our Trust Center describes our security posture, and you can request access to our security documentation there. Visit our Trust Center at trust.intelibly.com
Intelibly is undergoing a SOC 2 Type II audit.
Depending upon the type of service we provide, Intelibly may be deemed a "business associate" under HIPAA, and as such we are legally required to maintain the privacy of PHI. Our Trust Center describes our HIPAA compliance program.
Our HIPAA Privacy Policy (Notice of Privacy Practices), including how we notify you following a breach of unsecured PHI, is available at app.intelibly.com/hipaa-privacy-policy
• Access control: Access is tightly monitored and controlled.
• Infrastructure: Intelibly is hosted on Amazon Web Services (AWS) and Microsoft Azure, with Cloudflare providing web application firewall (WAF) and DDoS protection.
• Data security: We follow industry best practices for data security.
• Endpoint security: We follow industry best practices for endpoint security.
• Network security: We protect our corporate network against external and internal threats.
• Secure development: We follow a documented Software Development Lifecycle Policy.
• Security testing: An independent third party performs external security testing of our application.
• Change management: We have a change and configuration management process to ensure changes are properly reviewed and approved.
• Asset management: We have asset management policies to ensure all assets are accounted for and secure.
• Policies: Our policies include an Acceptable Use Policy and a Software Development Lifecycle Policy.
• Training: We provide security awareness training to all employees.
• Physical and environmental controls: We have physical and environmental controls to help keep the data centers we rely on secure and reliable.
• Encryption in transit: Data is encrypted in transit using TLS 1.2 or higher, with TLS 1.3 supported. Older protocols such as SSL and TLS 1.0/1.1 are disabled, and HTTP requests are redirected to HTTPS.
• Encryption at rest: Customer data, including our production database and its backups, is encrypted at rest using AES-256, with keys managed through AWS Key Management Service (KMS) and our cloud providers' key management.
• Passwords: User passwords are never stored in plain text; they are hashed with bcrypt.
• Company computers: Company computers are centrally managed and require full-disk encryption.
• Continuous monitoring: We continuously monitor our systems for security threats and vulnerabilities, and we use Sentry for application error monitoring and Datadog for monitoring of our website.
• Incident response: A dedicated team responds to security incidents.
• Risk management: A dedicated team manages security risks.
• Business continuity: We have a business continuity plan so that we can continue to operate in the event of a disaster.
Service providers we use include:
• Stripe: payment processing
• Sentry: application error monitoring
• Datadog: monitoring and analytics
• Webflow: hosting of the intelibly.com website
Our Privacy Policy explains how we collect, use and protect personal data. Read it at intelibly.com/privacy
Our HIPAA Privacy Policy covers protected health information. Read it at app.intelibly.com/hipaa-privacy-policy
If you believe you have found a security vulnerability in an Intelibly system, please tell us.
• Email us at [email protected]
• Encrypt your message with our PGP key: intelibly.com/.well-known/security-pgp-key.txt
• Or submit a report through our security portal: security.intelibly.com
• Our security.txt: intelibly.com/.well-known/security.txt
• Security: [email protected]
• General support: [email protected]
• Intelibly Inc, 110 Chichester Place, Suite 101, San Antonio, TX 78209, USA
Connecting providers to patients
110 Chichester Place, Suite 101
San Antonio, TX 78209
