Policy & Compliance
Policies, procedures, trust.
100%
Workforce trained annually on HIPAA & CMIA
24/7
Monitoring of systems containing PHI
< 24h
Privacy incident triage SLA
6
Active policies governing member data & care
Our framework
Three principles, one promise.
Our compliance program is built on principles that are easy to state and hard to compromise. Every policy below maps back to one of them.
Confidentiality by default
Every member interaction is governed by the minimum-necessary rule. Access to Protected Health Information is granted only to personnel whose role requires it, and is reviewed on a recurring cadence.
Security at every layer
Encryption in transit and at rest, multi-factor authentication, role-based access control, and continuous monitoring across the systems that hold member data.
Accountability to members
Clear rights, plain-language notices, accessible channels for questions and complaints, and documented response timelines for every privacy request.
Policy library
Read the full set.
Each policy below is a living document, reviewed at least annually and whenever regulatory or operational changes require it. Click any card to read the complete policy.
Last reviewed: October 2026
Privacy
HIPAA Policy
Our comprehensive program for safeguarding member confidentiality under HIPAA and the California Confidentiality of Medical Information Act (CMIA).
- Least-privilege access
- Annual workforce training
- Physical & administrative safeguards
Privacy
PHI Policy
How Protected Health Information is collected, stored, transmitted, and disposed of across our Enhanced Care Management and Community Supports programs.
- Encryption at rest & in transit
- Minimum-necessary rule
- Secure document handling
Member Rights
Notice of Privacy Practices
Your rights as a member — how we use and disclose your information, and the choices you have about your care record.
- Member rights summary
- Permitted disclosures
- How to file a complaint
Security
Data Security
Technical, administrative, and physical safeguards that protect every interaction with member data — from intake to closure.
- SOC-aligned controls
- MFA & SSO enforcement
- Continuous monitoring
Member Rights
Accessibility
Our commitment to an inclusive digital experience that meets WCAG 2.1 AA standards across every page and form.
- WCAG 2.1 AA aligned
- Keyboard & screen-reader tested
- Plain-language content
Quality
Commitment to Quality
How we measure, monitor, and improve the quality of care — from clinical outcomes to member experience.
- Outcome tracking
- Member satisfaction reviews
- Continuous improvement cycles
Questions or concerns?
Talk to our Privacy Officer.
If you believe your privacy rights have been violated, want to request a copy of your record, or have a question about any policy on this page, reach out. We respond to every privacy request — and confirm receipt within one business day.