Security & Privacy — BusyBook
Overview
At BusyBook Ltd. Co., security is fundamental to our mission. We protect our subscribers' business data and their clients' sensitive information through comprehensive security measures.
Business Address: 1209 Mountain Road PL NE, Ste R, Albuquerque, NM 87110, USA
Security Contact: security@busybook.co
Our Security Commitment
- HIPAA-aligned safeguards
- Encryption at rest and in transit
- Regular security assessments
- Access controls and monitoring
- Incident response procedures
Technical Safeguards
Encryption
Data in Transit:
- TLS 1.3 for all data transmission
- HSTS (HTTP Strict Transport Security) enforced
- Secure certificate pinning
Data at Rest:
- AES-256 encryption for database storage
- Encrypted backups
- Secure key management
Authentication & Access Control
- Multi-factor authentication (MFA) support
- Role-based access controls (RBAC)
- Session timeout after inactivity
- Secure password requirements
- OAuth 2.0 for third-party integrations
Database Security
- Database-level access controls enforced per practice
- Automatic security patches
- Regular backups with encryption
- Point-in-time recovery capability
- Database activity monitoring
Infrastructure Security
Hosting & Network
- Secure, managed infrastructure with strong data isolation controls
- Network isolation and segmentation
- Firewall protection
- DDoS protection
- Intrusion detection systems
Application Security
- Regular dependency updates
- Static code analysis
- Dynamic application security testing
- Input validation and sanitization
- Protection against OWASP Top 10 vulnerabilities
HIPAA Compliance
As a platform supporting healthcare practices, we implement HIPAA Security Rule requirements:
Administrative Safeguards
- Security management process
- Workforce security training
- Information access management
- Security incident procedures
- Contingency planning
- Business Associate Agreements
Physical Safeguards
- Facility access controls
- Workstation security
- Device and media controls
Technical Safeguards
- Access controls
- Audit controls
- Integrity controls
- Transmission security
Data Protection
Your Business Data
- Client contact information
- Appointment records
- Session notes (SOAP notes)
- Payment and billing data
- Business analytics
Your Client Data
- Health information
- Treatment records
- Communications
- Documents and files
How We Protect It
- All data encrypted in transit and at rest
- Access limited to authorized users
- Audit logs of all data access
- Regular security assessments
- Vulnerability management program
Incident Response
- Detection: Automated monitoring identifies potential incidents
- Assessment: Security team evaluates severity and scope
- Containment: Immediate steps to limit impact
- Investigation: Root cause analysis
- Notification: Affected users notified within 24 hours
- Recovery: Systems restored and secured
- Post-Incident: Lessons learned and improvements
Your Role
If you suspect a security incident: immediately change your password, contact security@busybook.co, document what you observed, and do not delete any data.
Your Security Responsibilities
Account Security
- Use strong, unique passwords
- Enable multi-factor authentication
- Keep credentials confidential
- Log out when finished
- Report suspicious activity
Data Handling
- Only collect necessary information
- Obtain proper consent
- Use secure networks
- Regularly export and back up
Compliance
- Maintain HIPAA compliance
- Keep consent forms on file
- Train staff on privacy
- Report breaches per state law
Third-Party Security
We carefully vet our subprocessors with security assessments, regular reviews, contractual requirements, and ongoing monitoring.
Compliance & Certifications
- HIPAA Security Rule compliance — administrative, physical, and technical safeguards in place
- SOC 2 Type II — controls implemented; formal certification in progress
- Ongoing internal security testing, code review, and vulnerability scanning
- External security assessment roadmap in development
Questions & Contact
General Security Questions: support@busybook.co
Report Security Issue: security@busybook.co
Address: 1209 Mountain Road PL NE, Ste R, Albuquerque, NM 87110, USA
Bug Bounty: We welcome responsible disclosure. Contact us before testing.
Trust is earned. We work every day to protect yours.