Our systems are built to exceed today’s data protection standards:
Avidon Health prioritizes the safety and privacy of your organization and participants. We ensure that our security measures are robust and that our training programs are comprehensive and up-to-date, reflecting our commitment to safeguarding your information.
From login to logout, your data stays secure:
AES-256 encryption for PII and sensitive data at rest
TLS 1.2 enforced encryption for all in-transit data
Strict role-based access control for internal and external users
Redundant systems & monitoring for uptime and incident prevention
Choose the access and integration path that fits your organization:
SSO (SAML 2.0) for seamless, secure login from your own platform
Eligibility file validation for population-specific access
Closed portals or self-registration—you choose the access model
API and webhook support to embed wellness into your ecosystem
We go beyond tech safeguards—our team is trained to keep your data safe:
Annual security training for every employee, contractor, and intern
Role-specific modules ensure team members are trained to their access level
Ongoing phishing simulations and live refreshers to prevent social engineering
Security standards embedded in SOPs and onboarding company-wide
Security is a shared responsibility—and we’re committed to doing our part.
We support full user data deletion in compliance with both HIPAA and GDPR. Admins can submit removal requests, and users can also request account closure through their portal.
In the rare case of a breach, we follow a strict incident response protocol, including immediate containment, impact assessment, and transparent communication with clients as required by law. We also conduct a full post-incident review to prevent recurrence.
Yes. Our role-based permission system allows you to define who can see and do what—whether it's admins, coaches, or members. You can even hide features like trackers or coaching for specific populations.
Yes. We provide BAAs for all eligible partners and vendors as part of our HIPAA compliance framework. Our agreements are standardized but can be reviewed with your legal or compliance team if needed.
Yes. Admins have access to detailed reporting and audit logs, including member activity, registration, content usage, and communication history.
We monitor regulatory changes and industry best practices through legal counsel, third-party audits, and our hosting provider (Microsoft Azure). We adapt our internal policies and platform features proactively.
©2025 Avidon Health LLC. All rights reserved. Privacy and Terms.