Security principles the platform is designed around.
BelleMed handles sensitive provider and organizational information. The proposed platform's architecture is guided by tenant isolation, least-privilege access, and data stewardship principles from the outset.
What the platform is built around
These are architectural intentions for a platform under development, not completed audit results.
Tenant isolation
The platform is designed so that one organization's provider and application data is never visible to another organization using BelleMed's services.
Role-aware access
Access to client and provider information is designed to be scoped to what a given role — client user, BelleMed specialist, or administrator — actually needs.
Encryption in transit and at rest
Sensitive information is designed to be encrypted both while it moves between systems and while it's stored.
Document handling
Untrusted input is validated, and any future document upload capability is designed to include type and size validation.
Auditable material changes
Significant changes to provider records and application status are designed to be tracked, not silently overwritten.
Privacy and data minimization
The platform is designed to collect and retain the information required for credentialing and enrollment work — not more than that.
How client and provider information is treated
Provider and organizational information is used to perform credentialing, enrollment, and contracting work on your behalf — not sold or shared for marketing purposes.
Information is not used outside the scope of the services you have engaged BelleMed to perform.
Authentication credentials and sensitive configuration are designed to be stored using secure, industry-standard practices.
Compliance status
BelleMed does not currently claim HIPAA compliance, SOC 2 certification, or any other formal security certification. This page describes design principles and intentions, not a completed audit or certification. Verified compliance status, if and when obtained, will be published here with supporting evidence.
See the platform in more depth
Have a specific security question?
BelleMed can address organization-specific security and data-handling questions directly.