When we handle personal information on your behalf, we sign a service provider agreement that limits how that data may be used, as the California Consumer Privacy Act requires of service providers and contractors.
If you face a security audit or a customer questionnaire, we supply the evidence for our part of the work: change records, access lists, backup and restore test results and network diagrams.
For regulated software such as practice-management or payment systems, we follow the vendor's published infrastructure requirements and coordinate with their support team.