Security & HIPAA
The safeguards we use to protect your health information.
Last updated: June 10, 2026
Protecting your health information is core to how Fast UTI Care (including HerRelief and RapidRelief) is built. We apply administrative, physical, and technical safeguards designed to align with the HIPAA Security Rule and to keep Protected Health Information (PHI) confidential, accurate, and available to authorized users only.
Encryption
- In transit: traffic is served over HTTPS/TLS, so data moving between your device and our servers is encrypted.
- At rest: PHI is stored using the encryption-at-rest capabilities provided by our infrastructure providers.
Access Controls
- Authentication: accounts are protected by a dedicated identity provider; provider and admin accounts require the appropriate role.
- Role-based access: patients, providers, and administrators each see only the information their role permits.
- Least privilege & jurisdiction limits: providers only access visits in the states they are licensed in.
- Object-level authorization: every request is checked so users can only reach records they are entitled to view.
Auditing & Monitoring
Key actions on the platform are recorded in an audit log, creating an accountable trail of who accessed or changed records. We monitor for unusual activity and security events.
Data Minimization
We collect only the information needed to evaluate and treat your visit, and payment card details are handled by our PCI-compliant payment processor rather than stored on our servers.
Vendors & Business Associates
When third parties process PHI on our behalf — hosting, database, authentication, payment, and AI providers — we seek to put Business Associate Agreements (BAAs) in place that obligate them to protect your information under HIPAA.
Breach Response
We maintain procedures to investigate and respond to security incidents. In the event of a breach affecting your PHI, we will work to notify affected individuals and regulators consistent with the HIPAA Breach Notification Rule and applicable state law.
Your Role in Security
- Keep your login credentials private and use a strong, unique password.
- Sign out on shared devices.
- Contact us immediately if you suspect unauthorized access to your account.
Reporting a Security Concern
If you believe you have found a vulnerability or have a security concern, please contact our Security team at security@fastuticare.com.