Security & Compliance Overview

Your data, protected at every layer.

Overview · Version 1.3 · 5 pages

This overview explains how MaxxLogix Outcome Cloud™ protects sensitive information, supports HIPAA-covered organizations, and keeps data in the United States. Outcome Cloud™ can process protected health information (PHI), with your data encrypted in transit and at rest, under a Business Associate Agreement chain that reaches from your organization to the infrastructure.

Inside this document

• Built for sensitive information, including PHI: Outcome Cloud™ runs only in US-based Amazon Web Services (AWS) regions, and MaxxLogix signs your Business Associate Agreement (BAA) — and holds a BAA with AWS.
• Where your data lives: data for US customers is stored and processed only in the United States — AWS US East (N. Virginia), with backup and recovery in AWS US East (Ohio) — and is never processed offshore.
• HIPAA and PHI: an unbroken chain of BAAs covers every party that can touch your PHI, PHI is processed only in HIPAA-eligible AWS services, and no PHI is sent to public AI models.
• Shared responsibility: who owns which controls across your organization, your partner, MaxxLogix, and AWS.
• Independent audits: Outcome Cloud™ runs only on AWS infrastructure covered by SOC 1, SOC 2, and SOC 3 reports, audited by Ernst & Young, with MaxxLogix application controls on top.
• Security controls: TLS 1.2 or higher in transit, AES-256 encryption at rest, role-based access control with multi-factor authentication (MFA) and single sign-on (SSO), a full audit trail, and tenant isolation.

MaxxLogix^® — Business Outcomes. Delivered.  ·  Browse all resources