Security

Security matters here because we work in behavioral health, where trust is the foundation of everything. This page describes how we approach the security of this website and the information people share with us.

This website

• Encryption in transit. Traffic to and from this site is encrypted using TLS, so information exchanged with the site is protected in transit.
• Minimal data collection. The site's request form asks only for the information needed to follow up with you: agency or practice name, your name, work email, services of interest, and your message. We ask that you not include protected health information in it.
• Access control. Access to site administration and any stored inquiries is limited to people who need it to do their jobs, and that access is tracked.
• Monitoring and maintenance. We keep the site's software updated and monitor it for anomalies so issues can be found and addressed early.

What we do with client-agency data

Where Guided Root Health provides managed operational support to an agency, data handling is governed by the agreement with that agency, which covers the purpose of processing, our obligations, and the controls in place. This page describes this website only.

A note on certifications

No compliance certification is claimed on this site — nothing here states or implies one. If we ever hold a certification, it will be described clearly and specifically on a page of its own.

Reporting a concern

If you believe you've found a security issue with this website, or you have a security concern, please let us know through the contact page and describe what you found. Please don't include protected health information or other people's personal data in your report.