Policy & Compliance
Policies, procedures,trust.

100%
Workforce trained annually on HIPAA & CMIA
24/7
Monitoring of systems containing PHI
< 24h
Privacy incident triage SLA
6
Active policies governing member data & care
Our framework
Three principles, one promise.
Confidentiality by default
Every member interaction is governed by the minimum-necessary rule. Access to Protected Health Information is granted only to personnel whose role requires it, and is reviewed on a recurring cadence.
Security at every layer
Encryption in transit and at rest, multi-factor authentication, role-based access control, and continuous monitoring across the systems that hold member data.
Accountability to members
Clear rights, plain-language notices, accessible channels for questions and complaints, and documented response timelines for every privacy request.
Policy library
Read the full set.
Last reviewed: September 2026
HIPAA Policy
Our comprehensive program for safeguarding member confidentiality under HIPAA and the California Confidentiality of Medical Information Act (CMIA).
- Least-privilege access
- Annual workforce training
- Physical & administrative safeguards
PHI Policy
How Protected Health Information is collected, stored, transmitted, and disposed of across our Enhanced Care Management and Community Supports programs.
- Encryption at rest & in transit
- Minimum-necessary rule
- Secure document handling
Notice of Privacy Practices
Your rights as a member — how we use and disclose your information, and the choices you have about your care record.
- Member rights summary
- Permitted disclosures
- How to file a complaint
Data Security
Technical, administrative, and physical safeguards that protect every interaction with member data — from intake to closure.
- SOC-aligned controls
- MFA & SSO enforcement
- Continuous monitoring
Accessibility
Our commitment to an inclusive digital experience that meets WCAG 2.1 AA standards across every page and form.
- WCAG 2.1 AA aligned
- Keyboard & screen-reader tested
- Plain-language content
Commitment to Quality
How we measure, monitor, and improve the quality of care — from clinical outcomes to member experience.
- Outcome tracking
- Member satisfaction reviews
- Continuous improvement cycles
Questions or concerns?
Talk to our Privacy Officer.
If you believe your privacy rights have been violated, want to request a copy of your record, or have a question about any policy on this page, reach out. We respond to every privacy request — and confirm receipt within one business day.
Ready to get started?

