Your data is protected
at every layer.
QuillsFlow is built for veterinary healthcare — an environment where clinical data, financial records, and personal information must be protected without compromise. Security is not a feature we added. It is how the platform was architected from day one.
Six layers of
protection.
QuillsFlow is designed with a defence-in-depth approach — multiple overlapping security controls so that no single point of failure can compromise your data.
🔐
Encryption
All data is encrypted at rest and in transit using industry-standard AES-256 encryption. No data is ever stored or transmitted in plain text.
- ✓AES-256 encryption at rest
- ✓TLS 1.3 for all data in transit
- ✓Encrypted database backups
- ✓Secure key management
👤
Access Control
Role-based access controls ensure every team member sees only the data they need. Permissions are set at the user, role, and location level.
- ✓Role-based permissions (vet, tech, front desk)
- ✓Multi-factor authentication
- ✓Session timeout enforcement
- ✓Admin audit trail for all access
📋
Audit Logging
Every action taken in QuillsFlow is logged with a timestamp, user ID, and IP address. Logs are tamper-proof and retained for a minimum of 7 years.
- ✓Full audit trail for all clinical records
- ✓Claim submission and modification logs
- ✓Login and access event logging
- ✓7-year minimum retention
☁️
Infrastructure
QuillsFlow runs on US-based, HIPAA-eligible cloud infrastructure. Data never leaves US jurisdiction. Redundant systems ensure 99.9% uptime.
- ✓US-only data residency
- ✓HIPAA-eligible cloud infrastructure
- ✓Automated failover and redundancy
- ✓Daily encrypted backups
🔍
Vulnerability Management
QuillsFlow conducts regular security assessments, penetration testing, and automated vulnerability scanning to identify and remediate risks proactively.
- ✓Annual third-party penetration tests
- ✓Automated dependency scanning
- ✓Security patch management
- ✓Responsible disclosure program
🚨
Incident Response
In the unlikely event of a security incident, QuillsFlow has a documented response plan with defined timelines for notification and remediation.
- ✓Documented incident response plan
- ✓72-hour breach notification (HIPAA)
- ✓Dedicated security response team
- ✓Post-incident review process
Meeting the highest standards.
QuillsFlow is built to meet the compliance requirements of veterinary healthcare — and the insurance industry it connects to.
HIPAA
Full HIPAA compliance including Privacy Rule, Security Rule, and Breach Notification. Business Associate Agreements available for Enterprise plans.
SOC 2 Type II
Third-party audit of our security, availability, and confidentiality controls. Audit in progress.
PCI DSS
Payment card data handled through PCI-compliant Stripe Terminal. QuillsFlow never stores raw card data.
HITRUST CSF
Certification against the HITRUST Common Security Framework is on our compliance roadmap.
State Privacy Laws
Designed to support compliance with California CCPA and applicable state veterinary data privacy regulations.
Common questions.
Security questions? Talk to us.
Our team is happy to walk through our security architecture, share our compliance documentation, or discuss specific requirements for your organisation.