Security and Certifications

    Practices to Protect All Your Data

    At ECP, your data's safety is our top priority. We follow the best security practices to keep your information secure. Rest assured, all the data you store with us remains yours, and we are dedicated to ensuring it stays private and protected from unauthorized access.

    ECP certifications

    Secure and Reliable Infrastructure

    While no single solution is foolproof to protect against a targeted attack, ECP, in partnership with Amazon Web Service (AWS), utilizes multi-tier defense-in-depth strategies to protect the integrity and confidentiality of patient data in accordance with HIPAA and provide a 99.99% uptime to be able to access your data. Daily backups are offloaded from host systems, and multi-location redundancy ensures that you can always access your data.

    Compliance provided by AWS

    Learn more about AWS.

    Our Security Commitment

    Our multi-layer security system, featuring AWS WAF (Web Application Firewall) and AWS Guard Duty (active intruder detection), continuously monitors and identifies suspicious traffic and attacks in real-time, alerting security operations immediately. Advanced antivirus practices are also implemented to safeguard your data from malware threats.

    Our Certifications

    SOC 2 Type II

    ECP has achieved SOC 2 Type II compliance without qualification, reaffirming its commitment to top-tier data security, availability, and confidentiality in senior living and long-term care.

    SOC 2 Type II, established by the AICPA, is a rigorous audit that assesses whether an organization's controls are properly designed to mitigate risks and protect client data consistently in day-to-day operations. Learn more about the audit process in our press release.

    ONC_Certification_HIT_logo_Master_RGB2This Health IT Module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.

    SLI-Certification-Mark-2024-Feb02

    ONC CERTIFIED HIT® is a registered trademark of HHS.
    SLI CERTIFIED® is a registered trademark of Gaming Laboratories International, LLC dba SLI Compliance.

    ONC Certified HIT

    Developer Name: Extended Care Professional, LLC
    Product Name: ECP
    Version: 8.0
    Certification number: 15.05.05.3086.ECP1.08.00.0.210514
    Certification date: May 14, 2021
    Criteria certified:

    • 170.315(b)(10) Electronic Health Information Export 
    • 170.315(d)(12) Encrypt Authentication Credentials
    • 170.315(d)(13) Multi-Factor Authentication
      • Use Cases: ECP supports multi-factor authentication for all users who are granted access by requiring a user-specific login & password, as well as a company-specific login factor (login & password or URL GUID).
    • 170.315(g)(4) Quality Management System
    • 170.315(g)(5) Accessibility-Centered Design

    Additional Types of Costs
    No additional costs at this time.

    Real World Testing

    ONC Certified HIT

    Developer Name: Extended Care Professional, LLC
    Product Name: ECP
    Version: 8.0
    Certification number: 15.05.05.3086.ECP1.08.00.0.210514
    Certification date: May 14, 2021
    Criteria certified:

    • 170.315(b)(10) Electronic Health Information Export 
    • 170.315(d)(12) Encrypt Authentication Credentials
    • 170.315(d)(13) Multi-Factor Authentication
      • Use Cases: ECP supports multi-factor authentication for all users who are granted access by requiring a user-specific login & password, as well as a company-specific login factor (login & password or URL GUID).
    • 170.315(g)(4) Quality Management System
    • 170.315(g)(5) Accessibility-Centered Design

    Additional Types of Costs
    No additional costs at this time.