NOW AVAILABLEClinical Intelligence Platform — Now Available
Product
Nyelux is built for the expectations of healthcare organizations: encrypted connections and storage, access enforced by the server, an audit trail, and a platform that never needs patient health information.
Connections to nyelux.com and our API use TLS 1.2 or higher with HSTS. Uploaded files are encrypted at rest in Amazon S3, and secrets such as two-factor keys and connected-app tokens are encrypted by the application before they are stored.
Individual accounts, separate roles for administrators, representatives and clinicians, account lockout after five failed password attempts in a row, and automatic sign-out from the web app after 30 minutes of inactivity.
The server decides what each user can see, based on their organization and role. The browser never makes that decision.
Changes to who can see a document are recorded, as are document opens by clinicians and key administrative actions by Nyelux staff.
Nyelux works with device information, training and clinicians’ professional profiles. It does not need patient health information, and the assistant manufacturers embed on their own websites refuses questions in which it detects patient identifiers.
We answer security questionnaires and support vendor risk reviews. Nyelux is preparing for a SOC 2 Type 2 examination; no SOC 2 report has been issued yet.
We answer security questionnaires from organizations evaluating Nyelux and support their vendor risk reviews. For the full technical view, see our data security page.