Davner
Trust Center

Security and compliance you can verify

We hold ourselves to the highest standards of security and compliance so your patients' data stays protected at every step. Review our frameworks, controls, and subprocessors below.

Compliance frameworks

The audited standards and attestations our security program is built against.

HIPAA Compliant

BAA available. Data encrypted at rest and in transit.

SOC 2 (Q3 2026)

Enterprise-grade security controls, audit trails, and operational safeguards.

Controls

Continuously monitored
78 controls across 5 domains, continuously monitored and independently reviewed.

Subprocessors

We carefully select and monitor every subprocessor. Any that handle protected health information have signed Business Associate Agreements.

Microsoft Azure

Cloud infrastructure and data storage

HIPAA · SOC 2 · ISO 27001 · HITRUST · PCI DSS

View security details

Google Cloud

Artificial intelligence and cloud services

HIPAA · SOC 2 · ISO 27001 · PCI DSS · GDPR

View security details

PlanetScale

Database platform

SOC 1 Type 2 · SOC 2 Type 2 · PCI-DSS 4.0 · HIPAA · GDPR · CCPA

View security details

Questions about our
security program?

Our team is available to walk through our controls and answer anything about how we protect your data.