Security and Trust at CopeSwipe
CopeSwipe is built for mental health practices, which means it handles some of the most sensitive information there is. Protecting it is not an afterthought. It is built into how the product works, from the database up.
How your data is protected
Strict data isolation
Every clinician and every client can reach only their own data. This is enforced at the database level, not just hidden in the interface, so one practice can never reach another's records and a client can never reach another client's.
Multi-factor authentication for clinicians
Clinician accounts require a second factor to sign in, and that requirement is enforced at the data layer. A password alone cannot reach protected health information.
Encryption everywhere
Data is encrypted in transit and at rest.
Access logging
Access to protected health information is recorded, creating an audit trail of who accessed what.
Least privilege by default
Our systems deny access by default and grant only what is needed. Sensitive files are stored privately, never in public locations.
Privacy
We collect only what is needed to provide the service, and we do not sell your data or your clients' data. A clinician's private clinical notes are visible only to that clinician, never to the client they are about. Clients' own information stays under their control and their clinician's, and no one else's.
HIPAA
CopeSwipe is built around HIPAA's requirements for safeguarding protected health information, including access controls, authentication, encryption, and audit logging. For practices that require a Business Associate Agreement, please contact us and we will be glad to discuss it.
Infrastructure
CopeSwipe runs on established, reputable cloud infrastructure with security and reliability practices appropriate for healthcare data.
Reporting a concern
If you believe you have found a security or privacy issue, we want to hear from you. Email us at hello@copeswipe.com and we will respond promptly. Our Privacy Officer can be reached at the same address for questions about how we handle data.