Security & Compliance
Your Data. Our Priority. Unwavering Security and Compliance at XoomRX
At XoomRX, we understand the critical importance of safeguarding patient information. That’s why we implement industry-leading security measures and adhere to strict compliance regulations to ensure the complete protection of your data.
Building a Secure Ecosystem
We take a multi-layered approach to security, protecting your data at every touchpoint:
Rigorous User Authentication
Multi-factor authentication (MFA) is mandatory for all users, including doctors, pharmacists, and XoomRX engineers. This adds an extra layer of security by requiring a unique code sent to a user's device in addition to their password. Login sessions also expire after 30 minutes of inactivity, further minimizing risk.
Comprehensive Data Encryption
All data at rest and in transit is encrypted using industry-standard protocols. This ensures that even if unauthorized access occurs, sensitive information remains unreadable.
Secure Cloud Infrastructure
XoomRX utilizes geographically dispersed data centers that meet the strictest compliance standards for the healthcare sector. These data centers employ advanced security measures, including multi-factor authentication for access and endpoint threat detection systems.
Regular Backups and Disaster Recovery
We conduct automated, encrypted backups of all data multiple times a day. This robust backup strategy ensures rapid recovery in the event of any unforeseen disruptions.
Compliance You Can Trust
XoomRX is committed to exceeding industry standards and adhering to all relevant regulations, including:
HIPAA (Health Insurance Portability and Accountability Act)
We strictly adhere to HIPAA regulations to safeguard the privacy and security of protected health information (PHI).
Other Regulations
We stay current on all applicable data security and privacy regulations to ensure ongoing compliance.
Putting You in Control
XoomRX empowers you with complete transparency and control over your data. You can access, review, and update your account information at any time. We are also committed to clear and open communication regarding any security practices or updates.