Wellola stores your data in Amazon Web Services (AWS) data centers (in AWS Region, EU West (Ireland)), which are HIPAA compliant, fully-secured, state-of-the-art facilities.
Secure Log In
Wellola staff use two-factor authentication when logging into AWS. This means that even if a bad actor had our password, they would still be unable to log into the Wellola account. When using SSH to gain access to our servers we use private keys.
We take backups of our data daily to ensure that no matter what your data is safe. Our backups are also stored on Amazon Web Services servers for maximum physical security.
We are constantly monitoring Wellola and will instantly know if something goes wrong and be on hand to fix it. One of the ways we montior our servers is using AWS Cloud Watch.
Wellola uses HTTPS using a 256-bit SSL certificate all throughout the site ensuring that your data is always safe when being transferred from your device to our servers.
We are constantly monitoring Wellola to ensure maximum uptime. Alerts are sent to staff anytime downtime is experienced so that it is kept to a minimum. You can see our uptime status page here
Secure Operating System
Our servers run on the Ubuntu Operating System which is updated periodically.
Please feel free to contact us
if you want any more information.
Where is my Data being kept?
Your data is kept on Amazon Web Services (AWS) servers located in Ireland. We may make copies of your data in other regions as backups to prevent loss of data, but it will always be kept within the EU.
Who can see my Patient Notes?
The clinic administrator, the clients clinician, and any clinic clinicians that the patient is shared with can see the patients notes. Wellola IT staff also do have access to these notes but they are not viewed unless there is a specific reason to. I.e. there is an issue/bug with the patient notes section of the website.
Is my data encrypted?
Your data is encrypted when being transferred from your device to our servers using a 256-bit SSL certificate. This prevents any “man in the middle” attacks where a malicious actor might try to pretend to be Wellola in order to get you to send your data to them.
Is my data backed up?
Yes, your data is backed up daily. These backups are then deleted after 14 days.