---
title: "Trust Center - Davner"
description: "Review Davner security practices, compliance controls, and subprocessors."
canonical_url: "https://davner.com/trust"
type: "reference"
---

Source: https://davner.com/trust

Trust Center

# Security and compliance you can verify

We hold ourselves to the highest standards of security and compliance so your patients' data stays protected at every step. Review our frameworks, controls, and subprocessors below.

## Compliance frameworks

The audited standards and attestations  
our security program is built against.

### HIPAA Compliant

BAA available. Data encrypted at rest and in transit.

### SOC 2 (Q3 2026)

Enterprise-grade security controls, audit trails, and operational safeguards.

## Controls

Continuously monitored

78 controls across 5 domains, continuously monitored and independently reviewed.

View All

Infrastructure Security

 

Unique production database authentication enforced

 

Encryption key access restricted

 

Unique account authentication enforced

 Show 18 more infrastructure security controls

 

Organizational Security

 

Asset disposal procedures utilized

 

Production inventory maintained

 

Portable media encrypted

 Show 11 more organizational security controls

 

Product Security

 

Data encryption utilized

 

Control self-assessments conducted

 

Penetration testing performed

 Show 2 more product security controls

 

Internal Security Procedures

 

Continuity and Disaster Recovery plans established

 

Continuity and disaster recovery plans tested

 

Configuration management system established

 Show 32 more internal security procedures controls

 

Data and Privacy

 

Data retention procedures established

 

Customer data deleted upon leaving

 

Data classification policy established

## Subprocessors

We carefully select and monitor every subprocessor. Any that handle protected health information have signed Business Associate Agreements.

View All

### Vercel

Application hosting

HIPAA · SOC 2 Type 2

[View security details](https://vercel.com/docs/security/compliance)

### Microsoft Azure

Cloud infrastructure and data storage

HIPAA · SOC 2 · ISO 27001 · HITRUST · PCI DSS

[View security details](https://learn.microsoft.com/en-us/azure/compliance/)

### Google Cloud

Artificial intelligence and cloud services

HIPAA · SOC 2 · ISO 27001 · PCI DSS · GDPR

[View security details](https://cloud.google.com/trust-center)

### PlanetScale

Database platform

SOC 1 Type 2 · SOC 2 Type 2 · PCI-DSS 4.0 · HIPAA · GDPR · CCPA

[View security details](https://trust.planetscale.com/)

## Questions about our security program?

Our team is available to walk through our controls and answer anything about how we protect your data.

[Contact the team](https://davner.com/book)