Security and Certifications

Practices to protect all your data

At ECP, your data's safety is our top priority. We follow the best security practices to keep your information secure. Rest assured, all the data you store with us remains yours, and we are dedicated to ensuring it stays private and protected from unauthorized access.

ECP certifications

Secure and Reliable Infrastructure

While no single solution is foolproof to protect against a targeted attack, ECP, in partnership with Amazon Web Service (AWS), utilizes multi-tier defense-in-depth strategies to protect the integrity and confidentiality of patient data in accordance with HIPAA and provide a 99.99% uptime to be able to access your data. Daily backups are offloaded from host systems, and multi-location redundancy ensures that you can always access your data.

Compliance provided by AWS

Our Security Commitment

Our multi-layer security system, featuring AWS WAF (Web Application Firewall) and AWS Guard Duty (active intruder detection), continuously monitors and identifies suspicious traffic and attacks in real-time, alerting security operations immediately. Advanced antivirus practices are also implemented to safeguard your data from malware threats.

Our Certifications

SOC 2 Type II

ECP has achieved SOC 2 Type II compliance without qualification, reaffirming its commitment to top-tier data security, availability, and confidentiality in senior living and long-term care.

SOC 2 Type II, established by the AICPA, is a rigorous audit that assesses whether an organization's controls are properly designed to mitigate risks and protect client data consistently in day-to-day operations. Learn more about the audit process in our press release.

ONC_Certification_HIT_logo_Master_RGB2This Health IT Module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.

SLI-Certification-Mark-2024-Feb02

ONC CERTIFIED HIT® is a registered trademark of HHS.
SLI CERTIFIED® is a registered trademark of Gaming Laboratories International, LLC dba SLI Compliance.

ONC Certified HIT

Developer Name: Extended Care Professional, LLC
Product Name: ECP
Version: 8.0
Certification number: 15.05.05.3086.ECP1.08.00.0.210514
Certification date: May 14, 2021
Criteria certified:

  • 170.315(b)(10) Electronic Health Information Export 
  • 170.315(d)(12) Encrypt Authentication Credentials
  • 170.315(d)(13) Multi-Factor Authentication
    • Use Cases: ECP supports multi-factor authentication for all users who are granted access by requiring a user-specific login & password, as well as a company-specific login factor (login & password or URL GUID).
  • 170.315(g)(4) Quality Management System
  • 170.315(g)(5) Accessibility-Centered Design

Additional Types of Costs
No additional costs at this time.

ONC Certified HIT

Developer Name: Extended Care Professional, LLC
Product Name: ECP
Version: 8.0
Certification number: 15.05.05.3086.ECP1.08.00.0.210514
Certification date: May 14, 2021
Criteria certified:

  • 170.315(b)(10) Electronic Health Information Export 
  • 170.315(d)(12) Encrypt Authentication Credentials
  • 170.315(d)(13) Multi-Factor Authentication
    • Use Cases: ECP supports multi-factor authentication for all users who are granted access by requiring a user-specific login & password, as well as a company-specific login factor (login & password or URL GUID).
  • 170.315(g)(4) Quality Management System
  • 170.315(g)(5) Accessibility-Centered Design

Additional Types of Costs
No additional costs at this time.