Security & Data Protection
Your residents' data is protected like financial records
SoberBase is built on healthcare-grade infrastructure. Every record is encrypted, every operator's data is isolated, and every access is logged.
SoberBase is built on healthcare-grade infrastructure. Every record is encrypted, every operator's data is isolated, and every access is logged.
Your residents' data is encrypted the same way banks protect financial records — both while it travels over the internet and while it sits in our database.
SoberBase runs on Render — US-based, SOC 2 compliant cloud infrastructure — with Neon PostgreSQL, an enterprise-grade database built for reliability.
Only the right people see the right data. Operators can only access their own residents and houses. Staff access is role-controlled. Every action is logged.
Passwords are hashed using industry-standard bcrypt. Sessions use secure HTTP-only cookies that are resistant to XSS attacks and token theft.
Your data is your data — full stop. SoberBase never claims ownership over resident records, compliance documents, or any data you create on the platform.
Resident data is never sold, shared, or used to train AI models. SoberBase does not share your records with any external parties — advertising, analytics, or otherwise.
Your records are automatically backed up every day using Neon's enterprise point-in-time recovery — so even in a worst-case scenario, your data is never lost.
Substance use disorder records are among the most sensitive data in healthcare — protected under both HIPAA and 42 CFR Part 2. SoberBase is built with the technical safeguards recommended by HIPAA to keep your residents' information private and protected.
Our infrastructure meets the technical safeguards outlined in the HIPAA Security Rule, including encryption standards, access controls, audit controls, and transmission security. We are designed to support operators who need to demonstrate confidentiality protections to licensing bodies like ODMHAS and ORH.
The Oxford Recovery House (ORH) certification framework has specific documentation requirements. SoberBase was designed with those requirements in mind — not bolted on afterward.
Drug test logs, curfew records, incident reports, and resident history all exportable as PDFs for any ORH audit.
Real-time compliance status across all ORH checklist items. See gaps before your auditor does.
Automatic alerts when a resident is overdue for drug testing — so you never miss an ORH requirement.
We're transparent about the technology we rely on. Every vendor is production-grade and used by healthcare and financial services companies worldwide.
| Component | Provider | Certification | Status |
|---|---|---|---|
| Application Hosting | Render (US-based) | SOC 2 Type II | Active |
| Database | Neon PostgreSQL | SOC 2 Type II, ISO 27001 | Active |
| Data in Transit | TLS 1.2+ / HTTPS | Industry Standard | Enforced |
| Data at Rest | AES-256 Encryption | NIST Recommended | Enforced |
| File Storage | Cloudflare R2 (US) | SOC 2 Type II | Active |
| Database Backups | Neon Automated | Daily point-in-time recovery | Active |
| Authentication | bcrypt + JWT | OWASP Recommended | Active |
Reach out directly. We'll answer every question — no sales runaround.
Email Us → Start Free Trial