Sunfish Security Information

Compliance Standards

Sunfish maintains compliance with HIPAA BAA.

---

Data Protection

Encrypted at Rest. All datastores with customer data are encrypted at rest. 

Protection in Transit. All traffic is encrypted with either TLS 1.3 or QUIC.

---

Penetration Testing

Our last penetration test was completed on February 15, 2024.

---

Vulnerability Scanning

Software is scanned for vulnerabilities on every release.

---

Identity and Access Management

Google Identity Platform is used for identity and access management.

---

Data Privacy

Please view our Privacy Policy page.

Report a Data Privacy Concern. Please email support@joinsunfish.com.