Security at Hormonaly
Hormonaly is built on an AES-256 encrypted architecture: encryption in transit and at rest, role-based access control, audit logging, and least-privilege service accounts across the platform.
Enterprise compliance
HIPAA, SOC 2, and HITRUST compliance is available for enterprise deployments, alongside data-processing agreements, regional data-residency options, and an enterprise-tier SLA. Non-enterprise tiers share the same technical security controls without the compliance attestations.
Responsible disclosure
We welcome vulnerability reports from security researchers. Contact the team through the contact page to report a security issue; we triage all reports and credit responsible disclosures.