Dedicated Infrastructure
Biblicare runs on its own dedicated servers in geographically diverse, professionally managed data centers. Our systems are not hosted on shared public cloud platforms.
Encryption
All data is encrypted in transit (TLS/SSL) and confidential records and files are encrypted when stored.
Certified Data Centers
Our facilities follow recognized standards such as ISO 27001, SOC 1/2/3, PCI DSS Level 1, FedRAMP, NIST frameworks, and HITRUST, with strong physical and operational safeguards.
Restricted Access
Access to servers is limited to the BibliCare team and vetted engineers when required. Counselor and counselee permissions are role-based and monitored.
Audit Logs
User activity is tracked with detailed logs for oversight and compliance.
Backups & Recovery
Databases are backed up continuously and stored both onsite and offsite for disaster recovery.
Data Ownership
You own your data and can export it anytime. Your records are deleted if you unsubscribe from BibliCare.
Secure Messaging
Our Messages tool uses encryption. If unencrypted email is used, clear warnings are provided.
HIPAA-Aligned Practices
While we do not represent BibliCare as HIPAA-compliant, our security and access practices align with many HIPAA-grade controls (encryption, limited access, monitoring, and backups)—without adding constraints you may not need.
Third-Party Security Assessments
BibliCare contracts with multiple independent cybersecurity firms to conduct periodic assessments and reviews of our security practices. Findings from these assessments are used to help us improve how we safeguard sensitive information. These reviews are conducted without access to client records, counseling content, or other confidential information.
Commitment to Security
We maintain rigorous safeguards and continually improve protections.