Data Security

Last Updated: July 15, 2026

1. Security Architecture

At Nostavia Health, security is built into our infrastructure from the ground up. We understand that health data is highly sensitive, and our platform is designed to provide maximum protection for your users' information.

2. Encryption Standards

All data transmitted between our clients, SDKs, and our backend infrastructure is encrypted in transit using industry-standard TLS 1.3. Data at rest is encrypted using AES-256 encryption across all our databases and storage systems.

3. Compliance & Certifications

We strictly adhere to global data protection and privacy standards:

  • SOC 2 Type II: Our infrastructure undergoes rigorous audits to ensure the security, availability, and processing integrity of our systems.
  • GDPR Alignment: We follow the principles of the General Data Protection Regulation, providing tools for data subject rights including access and deletion.
  • DPDP Compliant: As an India-headquartered company, we strictly adhere to India's Digital Personal Data Protection Act framework.
  • HIPAA Readiness: Our systems are designed with HIPAA-compliant architectures for US-based partners.

4. Access Controls

We enforce strict role-based access control (RBAC) internally. Access to production environments and customer data is restricted to authorized personnel who require it to perform their job functions. All access is logged, monitored, and regularly audited.

5. Continuous Monitoring

Our security team utilizes automated monitoring, intrusion detection systems, and regular vulnerability scanning to proactively identify and mitigate potential threats. We also conduct periodic penetration testing by independent third-party security firms.

6. Incident Response

We maintain a comprehensive Incident Response Plan to rapidly address any security events. In the unlikely event of a data breach, we commit to notifying affected partners and regulatory bodies in accordance with applicable laws.

7. Contact Security Team

If you have identified a potential security vulnerability in our platform, please report it to our security team immediately at contact@nostaviahealth.com. We appreciate responsible disclosure and work quickly to address issues.