Security & compliance
Kimedics data security
At Kimedics, data security is our top priority. Here is how we protect the sensitive information entrusted to us, and the controls that keep it safe.
Our unwavering commitment to data security
At Kimedics, data security is our top priority. We understand that as a clinician workforce operations platform, we store incredibly sensitive information about clinicians, staffing agencies, and healthcare organizations. This makes us stewards of highly confidential data that we take very seriously.
That's why Kimedics has made an unwavering commitment to protecting the data entrusted to us through stringent security protocols and industry best practices.
Our systems utilize access controls, encryption both in transit and at rest, regular automatic backups stored in redundant secure locations, and more.
Our hosting environment and infrastructure are carefully designed specifically to prevent unauthorized access. This includes being hosted on Microsoft Azure under our own dedicated tenant managed solely by Kimedics staff. LocumTenens.com does not have access to these services.
We also engage independent third party testing and audits on an ongoing basis to validate our security measures are working as intended. Customers can review our annual audit results for assurance we are meeting our strict internal data protection policies.
Additionally, we remain completely operationally independent from our parent company LocumTenens.com with strict data separation policies enforced.
You may also reference our Privacy Policy
Our data security commitments
What we commit to
Independent cloud hosting
We use a Microsoft Azure environment managed solely by Kimedics staff. Our parent company (LocumTenens.com) has no direct access.
Access controls
Data is protected by SSL and database encryption. Permissions allow customer control over user and partner access.
Vendor neutrality
Customers freely manage partnerships and data sharing. We provide the connections.
Ongoing auditing
Annual 3rd party audits confirm our data policies are followed.
Data integrity
We commit to our posted Data Protection Policy as part of your contract.
Employee controls
Kimedics customer application data access is limited to dedicated staff only.
Our customer success team knows the healthcare industry, and gets it when you need help fast.
- We know that you are using our technology to help drive crucial functions like getting payroll ran, setting up schedules, hitting start dates. Our team is here to help your team best leverage the Kimedics platform for your most crucial operations.
- We get how urgent your needs can be because we know your industry, we have dealt with payroll issues with doctors, we get how important it is to hit a start date, and when payroll needs to get run it has to be done today.
- Healthcare staffing models, pay and workflows across teams can be nuanced and complex, our customer success team is here to make sure you are using all of our customizations to operate as efficiently as possible.
In healthcare, security is a top priority.
With Kimedics, you can expect.
- Dedicated security experts: Our parent company provides seasoned cybersecurity talent with extensive experience securing healthcare data.
- Continuous monitoring: We constantly scan for vulnerabilities and keep systems patched and updated.
- Strict protocols: Employees undergo background checks and regular security training to enforce best practices.
- Ongoing testing: Annual independent cybersecurity audits and penetration testing help identify and resolve weaknesses.
- Confirming compliance: Third party data integrity audits validate we adhere to posted data commitments.
Built with best practices, on state-of-the-art infrastructure.
Kimedics is built on a secure technology stack.
- Cloud-based: Our platform is hosted on Microsoft Azure, eliminating on-premises servers while providing immense scale.
- Encryption: Data is encrypted in transit and at rest using industry standard protocols like HTTPS and TLS.
- Backups: Regular automatic Azure backups help prevent data loss.
- Scalability: Cloud technology allows flexible scaling to match demands.
- Reliability: Azure provides a 99.95% monthly uptime SLA along with redundancy.
- Secure coding: Our developers use rigorous coding standards, testing, and design reviews.
- Up-to-date: We continuously patch and upgrade platforms for optimal security.
Implementing advanced product features and controls.
We're committed to offering advanced settings for security and compliance such as:
- Granular access controls: Role-based, location-based, and partnership-based permission settings give you full control.
- Audit logging: IP address tracking logs all user activity for transparency and accountability.
- External authentication: Tightly managed logins coming soon through secure industry standard protocols like OAuth.
- Integrations & API: Ability to connect with your existing tech stack for unified workflows and governance.
- User provisioning: Easily manage access with just-in-time, and automated de-provisioning based on policy.
- Reporting: In-depth usage analytics help optimize configurations and identify issues early.
- Policy administration: Enterprise-grade ability to set and govern security policies across locations.
