Security
How we protect records about children, survivors and families
Audited every year, isolated per organization, and logged down to who opened a record.
Audited every year
Network Ninja is HIPAA compliant and audited annually for both HIPAA and SOC 2 Type 2.
- Request the reports and policies at our Trust Center.
- A Business Associate Agreement is available, and you accept it inside Collaborate, where its status and version are recorded.
Your data stays yours
- Isolated per organization in the database itself. Separation between organizations is enforced by the database, not by application code remembering to filter every query.
- Encrypted. AES-256 at rest, TLS in transit.
- Hosted in the United States on Amazon Web Services.
- Never used to train AI models.
Who can get in
- MFA. Require it for everyone in your workspace, with backup codes for a lost phone.
- Access per program. Roles are set program by program, so staff see the programs they work in.
- Sessions end on their own after inactivity, and are revoked when a password or MFA setting changes.
A record of every access
- Audit logs cover cases, documents, notes, form submissions, people, programs and memberships.
- Views of sensitive records and document access are logged too, and so is who looked at the audit log.
- Admins read the log for the workspace, a program or a single record; each staff member can see their own activity.
AI under the same rules
- The reporting agent, the AI assistant that runs your funder reports, is connected by a workspace admin, sees only what that admin can see, and connecting it requires MFA.
- Translation runs on Claude through AWS Bedrock, in the United States.
- Your data is never used to train AI models.
“Our therapy team struggled to use our database because it wasn't a HIPAA-compliant database at that time. Our therapists were using one set of documents, our medical team was using another set of documents. Collaborate allowed us to bring everybody into one combined health record that worked for everybody.”
Kelli MukaddamData Specialist / Handle With Care Coordinator, National Children's Advocacy Center
Filling out a security questionnaire?
Our RFP resources and the Trust Center cover the standard questions. Anything else, ask us on a call.