Security

Sensitive records, handled with care.

You hold some of the most private information there is. Condor is HIPAA-ready and SOC 2-ready, with the controls explained plainly.

Start 14-day free trial Try the demo

HIPAA-ready · SOC 2-ready · Screens show sample data only

Condor in-app security page explaining encryption, per-tenant row-level isolation, MFA and role-based access
The security page inside the app.

The controls

The problem

A breach or the wrong person seeing a chart hurts the people you serve.

What Condor does

Condor puts these in place for every agency:

  • Encryption in transit and at rest. Passwords hashed. Authenticator seeds and government identifiers encrypted before they are written
  • Per-tenant row-level isolation: one agency’s query never returns another’s rows, and the app cannot bypass it
  • Each person has their own login with an authenticator code (MFA). No shared access codes
  • Sessions end after 45 minutes idle, and 16 hours after sign-in
  • Consent controls, with Part 2 records blocked by default
  • Backups
  • Incident notice if something goes wrong
Condor approvals screen for a sample agency listing items waiting for a supervisor
Supervisor approvals with a full trail. Sample data.

Who can see what

The problem

Everyone seeing everything is the most common risk.

What Condor does

The role decides chart, scorecard, billing, templates and family access. A direct-care login sees their unit, not the whole agency. Staff accept a dated confidentiality oath before opening records.

  • Role permissions
  • Location scope
  • Confidentiality oath
  • Logout ends the session
Condor audit log with a hash for each row
The append-only audit log. Sample data.

Honest paperwork

The problem

Unsigned templates passed off as contracts cause trouble later.

What Condor does

Terms, privacy, a BAA template and an accessibility template are drafts with a version, not signed agreements. Trial signup asks you to accept them and says when a card would be charged. The demo warns people not to enter real client information. A preview site can be password-gated and hidden from search engines.

  • Legal templates, clearly marked drafts
  • Signup consent
  • Demo notice
  • Preview gate and noindex option
Condor Try the demo page saying the sample workspace is fictional and not to enter real client information
The demo notice.

HIPAA-ready and SOC 2-ready describe how the controls are designed. They are not a certification, and Condor has not completed a HIPAA or SOC 2 audit. Questions for your compliance review? Email support@condoroutcomes.com or ask in a demo.

It all comes back to the Scorecard

Every log, note, program and report in Condor feeds the Behavior Scorecard, and the Scorecard feeds Outcomes. One record, one picture of how each person is doing.

ScorecardOutcomesProgramsFeaturesFloorIncidentsMedsCensusLanguagesFamilySharingReportsRolesInteroperabilitySecurity

See it with your own program in mind

Try the demo: a made-up agency with sample data only, so never enter real client information. Or start a 14-day free trial with your own empty workspace.

Trial terms: no card, sign up yourself. After 14 days you get 3 days of grace, then read-only with your data kept.

Start 14-day free trial Book a free demo

Scorecard is $299/mo billed annually. Scorecard + MAR is $449/mo billed annually ($549 month to month). e-Prescribing add-on $79 per prescriber per month, coming soon. 14-day free trial, no card. White-label and partner options available, contact us. See pricing.