Security Program

(Last Updated: December 30, 2024 )

Our Commitment to Security

At Travalab LLC ("Travalab"), located at 101 Jefferson Dr, 1st Floor, Menlo Park, CA 94025, we prioritize the security of your personal and medical information. Our comprehensive security program ensures the protection of your data throughout our service delivery process.

HIPAA Compliance

Our security framework is built on HIPAA compliance requirements and industry best practices.We implement multiple layers of protection through technical, physical, and administrative safeguards.

Our technical safeguards include end-to-end encryption for data transmission, secure HIPAA-compliant hosting, and multi-factor authentication. We maintain continuous system monitoring and regularly update our security protocols to address emerging threats.

Physical security extends to all aspects of our operations, including secure specimen handling, protected mobile devices, and controlled access to physical records. We maintain strict protocols for the secure disposal of medical waste and conduct regular security audits of our facilities and processes.

Our administrative safeguards ensure that all personnel are properly trained and vetted. Weconduct thorough background checks, provide ongoing security training, and maintain strictaccess control policies. Regular policy reviews and updates ensure we stay current with security best practices.

Data Protection

We employ industry-leading practices to protect your data at rest and in transit. Our storage security includes encrypted data storage with regular backup procedures and comprehensivedisaster recovery plans. All system access is logged and monitored to detect and preventunauthorized access.

For financial transactions, we maintain PCI DSS compliance and use secure paymentprocessing systems. All financial data is encrypted and processed through secure, validatedpayment gateways.

Incident Response

Our incident response program ensures swift action in case of any security concerns. Wemaintain a comprehensive breach notification protocol in compliance with HIPAA requirementsand applicable state laws. Our security team continuously monitors our systems and conductsregular vulnerability assessments to proactively identify and address potential security risks.

Mobile Application Security

The security of our mobile application is paramount to our operations. We employ secure login requirements, data encryption, and privacy-preserving features throughout our mobile platform.Regular security updates ensure our application remains protected against new threats.

Infrastructure Security

Our infrastructure is built on enterprise-grade cloud services with multiple layers of security controls. We conduct regular penetration testing and third-party security audits to validate oursecurity measures. Our development practices follow secure coding guidelines and include automated security testing throughout our development lifecycle.

Responsible Disclosure

We value collaboration with the security community. Security researchers are welcome toresponsibly disclose any vulnerabilities they discover. Please contact us atsecurity@travalab.com to report security concerns. We ask researchers to allow reasonabletime for remediation and avoid any actions that might disrupt our service or compromise userdata.

Contact Information

For security-related questions or to report concerns, please contact us immediately:
Email: support@travalab.com
Phone: 1-800-921-6933Address: 101 Jefferson Dr, 1st Floor, Menlo Park, CA 94025
We regularly review and update our security measures to address new threats and maintain best practices. Check this notice periodically for updates about our security program.