Security
No passwords.
No shared logins.
Every change recorded.
Resident information is health information. Here is how BardisCare looks after it.
Signing in
- Your organization’s accountsStaff sign in with the Microsoft or Google Workspace account they already have, or through another OpenID Connect provider you run such as Amazon Cognito, under your own rules such as two-step sign-in
- No BardisCare passwordsWe never store one
- Short sessionsSigned out after 15 minutes idle, and after 8 hours at most
- Shared tabletsThe time clock kiosk uses a PIN for each person and locks after wrong tries
Access
- Only what your job needsEvery screen, list, export and download is checked against your role and facility
- Changes need a fresh sign-inGiving or removing access asks you to sign in again
- HistorySign-ins, exports, resident changes and access changes are recorded
- Exports on requestMade when you ask, never stored afterwards
Where the data lives
- Microsoft Azure, in the United StatesOn a private network; the database can’t be reached from the internet
- EncryptedOver the network and where it’s stored
- Backed up automaticallyDatabase backups kept for 7 days
- An agreement firstWe sign a business associate agreement with each facility before any resident information goes in
Questions
Your compliance officer or IT person can ask us anything. Write to hello@bardiscare.com.