Security and compliance.

Casetop runs on HIPAA-eligible infrastructure with AES-256 encryption at rest and TLS 1.3 in transit. Business Associate Agreement (BAA) available on request from Settings → Compliance. SOC 2 Type II audit in progress. Role-based access control, tamper-evident audit log of every notification and sign-in, MFA, SSO on Mid tier.

This page uses JavaScript to render its full interactive content. Enable JavaScript, or continue reading at https://casetop.io/security.