Trust and security
Qintara is built by a working hormone optimization practice. The controls below are the ones we rely on for our own patients every day, not a list assembled for a sales page.
Four controls do most of the work. Each one is enforced by the platform, not by policy or training.
Patient data is encrypted at rest using AWS Key Management Service, with a separate key for each practice. One clinic's key cannot open another clinic's records.
Row-level security runs inside the database itself, so a query can only ever return the practice it belongs to. It holds even if the application layer is wrong.
Authentication runs on AWS Cognito with multi-factor authentication and role-based permissions. Practices on Microsoft can federate their own directory and keep their existing sign-in.
Administrative actions are written to an append-only log, and records are retired rather than destroyed, so the history of a chart stays intact.
Where each item genuinely stands today. We would rather show you an honest date than a badge.
Business Associate Agreement signed with every practice before any patient data is loaded.
Controls monitored continuously through Vanta. Audit window opens October 2026.
TLS on every connection, customer-managed keys on stored data.
Managed rules enforced at the edge on all patient-facing traffic.
Every vendor that may handle PHI on your behalf is named, with an agreement in place. Available on request.
The short version, in plain terms.
Protected health information belongs to your practice. We process it only to provide the service you have engaged us for, under the terms of our Business Associate Agreement.
We do not sell, rent or trade patient information, and we do not use it to advertise to you or to anyone else.
Your records are exportable. Leaving does not mean losing your history.
Our full privacy notice and Business Associate Agreement are provided during onboarding and are available beforehand on request.
Ask for the Business Associate Agreement, the subprocessor register, or a security review. A person answers.