> ## Documentation Index
> Fetch the complete documentation index at: https://docs.denialbase.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Trust Center

> How Denialbase protects your patients' information.

The claims you send us contain protected health information (PHI). This Trust Center describes how we handle it:
what we do, as it's built today. It doesn't list certifications; we haven't been audited for any.

<CardGroup cols={2}>
  <Card title="Security" icon="lock" href="/trust/security">
    Encryption, access control, audit logs and how we build.
  </Card>

  <Card title="Privacy and your data" icon="shield-check" href="/trust/privacy">
    The business associate agreement, retention, deletion and export.
  </Card>

  <Card title="Subprocessors" icon="server" href="/trust/subprocessors">
    The services we run on, and what each one handles.
  </Card>

  <Card title="Contact" icon="envelope" href="/trust/contact">
    Report a security concern or ask a question.
  </Card>
</CardGroup>

## In short

* **No patient data before a signed business associate agreement.** Every way in for a practice stays closed until
  its BAA is signed.
* **Encrypted in transit and in the database.** HTTPS everywhere, and sensitive fields encrypted by the application
  before they're stored.
* **Least access.** Practice roles, two-step verification, passkeys and single sign-on; every request is checked
  against who may see what.
* **Logged.** Access to patient data is written to an audit log we keep for six years.
* **Patients stay in control.** A patient's details show only after they confirm their date of birth, and they
  can revoke their authorization any time.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.