Security & Compliance at Kinetically
Your Data Trust is Our Priority
At Kinetically, Inc., we understand that movement data is personal health information. As a platform built for physical therapists, we prioritize the security, privacy, and integrity of the data you entrust to us.
HIPAA Compliance
Kinetically is designed from the ground up to meet the rigorous standards of the Health Insurance Portability and Accountability Act (HIPAA).
Business Associate Agreements (BAA): We sign BAAs with our covered entity clients to ensure a clear legal framework for data protection.
Patient Privacy: Our movement analysis tools are built to capture only the data necessary for clinical progress tracking, ensuring patient confidentiality at every step.
Data Encryption
We protect your data whether it is sitting on our servers or traveling across the internet.
In Transit: All data sent between your device and our servers is encrypted using industry-standard TLS 1.2+ (Transport Layer Security).
At Rest: Patient records, movement videos, and analysis data are encrypted using AES-256 bit encryption.
Secure Infrastructure
Kinetically is hosted on world-class cloud infrastructure that maintains several security certifications, including SOC 2 and ISO 27001.
Continuous Monitoring: We employ automated threat detection to identify and respond to potential security risks in real-time.
Access Control: We use strict internal access controls to ensure that only authorized personnel have access to the systems that manage your data.
Clinician & Patient Control
Role-Based Access: Clinic administrators can manage permissions to ensure only the right staff members see specific patient data.
Data Portability: Clinicians can export patient progress reports at any time for integration into their primary EMR systems.
Have Questions?
If you have specific questions about our security protocols or would like to request our full security whitepaper, please contact our security team at security@kinetically.ai.
