GDPR Compliant
European-grade privacy
Your data is processed in line with the EU General Data Protection Regulation. You have the right to access, rectify, port and erase your information at any time, with full transparency on how it is used.
Security & Trust
Your health data, protected end to end
GDPR compliance, AES-256 encryption, data sovereignty and ISO 27001 hosting — how we keep your biomarker data safe.
End-to-End Encryption
AES-256 in transit & at rest
Every biomarker, report and conversation is protected with AES-256 encryption — the same standard trusted by banks and intelligence agencies. Keys are rotated regularly and never leave secure hardware modules.
Data Sovereignty
You own your data
You decide what to share and for how long. Export your full history as a portable file, or permanently delete your account and all derived data with a single click — no friction, no retention games.
Secure Cloud
Hosted on certified infrastructure
Our backend runs on ISO 27001 and SOC 2 Type II certified cloud regions. Network-level isolation, least-privilege access and 24/7 monitoring are enforced by default.
Day-to-day practices
Concrete commitments that go beyond the certifications.
Zero-knowledge access
Engineers cannot read your raw biomarker values. All access is audited, time-bound and requires hardware-key authentication.
HIPAA-aligned standards
Operational controls follow HIPAA Security Rule guidance even where not legally required, raising the bar for everyone.
Regional data residency
Choose where your data lives. EU-only residency is available on request to keep records inside European borders.
Have a security question or want to report a vulnerability? Email security@healthbeyondnormal.com.