Trust

Security

How we protect the data hospitals trust us with.

Replionix processes sensitive supply-chain data for healthcare organizations. Protecting that data is fundamental to how we build the platform. This page describes our current practices.

Data encryption

All traffic to and from Replionix is encrypted in transit using TLS. Data at rest is stored on managed cloud infrastructure with encryption enabled by the provider.

Infrastructure

The platform runs on reputable managed cloud providers with a managed Postgres database. Production secrets are held in the hosting provider’s encrypted environment settings and are never stored in source control. All public endpoints are rate limited, and uploads are validated for type, size and content before processing.

Certifications

Replionix does not currently hold ISO 27001, SOC 2 or HIPAA certification. We are an early-stage company and would rather state that plainly than imply a status we have not earned. Formal certification is on our roadmap. Note that Replionix processes inventory and supply-chain data, not patient records.

Access control

Access to customer data is restricted to authorized personnel on a need-to-know basis. The product itself is currently held behind a shared access credential issued by our team, and is not open to public sign-up.

In development. Named user accounts, role-based permissions and per-customer data isolation enforced at the database layer are being built now, and will be in place before any customer’s live data is onboarded. We would rather tell you what is not yet built than imply otherwise, and we are happy to walk your IT team through the current architecture and the roadmap.

Data ownership

Your data is yours. We process inventory data solely to deliver recommendations, we do not sell it, and you can request export or deletion at any time.

Responsible disclosure

If you believe you have found a security vulnerability, please report it to security@replionix.com. We appreciate responsible disclosure and will respond promptly.

Questions

For security or compliance questions during procurement, contact contact@replionix.com or reach out via our Contact page.