Security Overview (Administrative, Technical, Physical Safeguards)

Administrative. Access based on role/least privilege; workforce confidentiality obligations; security awareness training; vendor due diligence; incident response procedures.

Technical. Encryption in transit (TLS); encryption at rest where supported by our providers; network segmentation; logging/monitoring; MFA for administrative access; regular patching and vulnerability management.

Physical. Data centers operated by reputable providers with industry‑standard protections.

Reporting. Report suspected incidents to hello+security@shadownurse.com. No method is 100% secure; we continuously improve controls.