Security and compliance.

Casetop is a HIPAA business associate: labs e-sign the Business Associate Agreement from Settings → Compliance before uploading a case. Encryption in transit (TLS 1.2+) and at rest; secrets and integration tokens encrypted with a per-environment key. Role-based access with per-person permissions, append-only audit log of every sign-in, change and notification, TOTP MFA, Google and Microsoft SSO. Public subprocessor list at /security/subprocessors.

This page uses JavaScript to render its full interactive content. Enable JavaScript, or continue reading at https://casetop.io/security.