Privacy, Security & Compliance

🔒 How Heidi protects your data

Learn about Heidi's privacy, security, and compliance measures to keep your data safe and secure.

We live and breathe compliance here at Heidi, making sure your data is processed and stored safely every step of the way. But what does that mean in practice?

Encryption everywhere: Your data travels through an encrypted tunnel - no uninvited guests allowed - trust us, we test it regularly!

Strict access control: You,  the clinician, hold the keys, and explicit patient consent is a must - always. Heidi’s team can only peek at data if you specifically say, “Hey, help me troubleshoot!” (and even then, we log every step).

Global compliance: We’ve got you covered - HIPAA, GDPR, PIPEDA, APP - the lot. Plus, we’re certified with recognised security frameworks like ISO27001 and SOC2.

Delete means delete - forever: Once you’re done with your notes and hit the delete button, they’re gone. No backups.

Patient consent is key: We’re here to help you get your patients just as excited about and confident in using Heidi as you are. If you’re looking for inspiration on how to facilitate patient consent for your practice, we put together a handy guide here.

For further information on our security practices, visit Heidi’s Safety Page.