Security
How FollowThrough Health protects health information
Your report is read on your device. Explaining a report happens in your browser or app; nothing is uploaded unless you choose to save or share it.
What we do
- Encryption: all traffic uses HTTPS. Report text, health details, shared summaries and DocBridge lab data are encrypted in the database with a separate field key.
- Access control: each account sees only its own data. DocBridge clinics see only their own labs; front-desk members can prepare drafts but only clinicians can approve; clinic sessions sign out after 15 minutes without activity.
- Two-step sign-in: any account can require a 6-digit code from an authenticator app after the password, with one-time backup codes. Each code works only once.
- Data retention: each clinic chooses how long DocBridge keeps labs (30 days to 1 year); older labs and their patient links are deleted automatically every night. Clinic owners can download their activity log.
- Doctor in the loop: there is no way for DocBridge to send an explanation to a patient without a named clinician's approval.
- Audit logs: every view, edit, approval, share and deletion is recorded with who did it and when.
- Links that expire: doctor share links last 1 to 30 days and patient result links 30 days; only a fingerprint (hash) of each link is stored, and families can turn links off at any time.
- Retention and deletion: DocBridge labs are kept for 90 days by default. Anyone can delete their account and data from the app; deleting a clinic owner's account removes the clinic's labs.
- No training, no selling: health information is never used to train AI models and never sold.
- Product analytics without health data: we count actions (for example "a report was explained") without report content, accounts or IP addresses.
Services that handle data
| Service | What it does | What it can see |
|---|---|---|
| Render | Hosts the website, API and database | Encrypted account and health data at rest |
| Anthropic | Writes help-chat answers when the online helper is on | The question asked, and a result summary only if the person ticks "share" |
| Stripe | Handles plan payments | Name, email and card details for paying customers |
| GitHub | Stores FollowThrough Health source code | No patient data |
HIPAA status: FollowThrough Health has not yet signed Business Associate Agreements with these services. Until it does, DocBridge runs in pilot mode with de-identified or sample labs only, and FollowThrough Health does not claim to be HIPAA compliant.
If something goes wrong (incident plan)
- Contain: revoke affected keys and links, and take the affected feature offline if needed.
- Assess: work out what data was involved, whose, and how, using the audit logs.
- Notify: tell affected people and clinics without unreasonable delay, and within the time limits the law requires, with what happened, what data was involved and what to do next.
- Fix and learn: fix the cause, check it can't recur, and write up what changed.
Report a security concern
Please use the "Was this helpful?" box in the app and include the words "security concern", and we will follow up. Please don't include personal health details in the report.