Security & architecture
Separation you can point at in the code.
Programs are kept apart in the database and the API, not in the interface. Detail enough to hand to your security reviewer.
Separation between brokers is server-side
Middleware resolves the caller’s broker from the database, never from the request body. A browser cannot ask for another broker’s data by editing a payload, because the payload is not what decides.
Members are scoped to a household
Member routes resolve the signed-in user to their own member record and household, then scope every read to it. A member cannot request a household id that is not theirs.
Eight roles, checked in the API
System admin, broker admin, vendor admin, vendor agent, affiliate, agency owner, group admin, member. The front end picks layouts from that. Authorization is decided in the API.
Sessions expire on our terms
Short-lived access tokens, rotating refresh tokens, and an absolute session cap measured from login that refreshing does not extend. Admins can revoke a session mid-flight.
Bank and payment data
Payout bank details are stored encrypted and decrypted only when an ACH file is assembled. Enrollment card capture runs through the processor; the platform keeps references.
AI is opt-in per broker
Summaries, bill parsing, OCR, and drafted replies switch on per organization. AI touching member health information runs through a key-gated hub, not a public endpoint from the app server.
Auditing and integrity checks
Action audit logging across the API, billing drift audits, weekly payout reconciliation, and a scheduled inspector job that reviews production logs.
Infrastructure
Microsoft Azure: SQL Database, App Service, Blob Storage, Functions. Webhooks and vendor SFTP are signature-verified or key-gated at the boundary.
Compliance documentation
Questionnaires, current attestations, HIPAA posture, business associate agreements, and subprocessor lists are shared under NDA. Ask when you book a demo.
Request the security packetBring your security reviewer to the demo.
We would rather answer the hard questions in week one than in week twelve.
Book a demo