Health conditions, medications, behavior data, guardianship, finances. For many of the people you support, this system holds more about their life than any other. We treat that accordingly.
SOC 2 Type II
Audited annually · report available under NDA
HIPAA aligned
BAA signed on request for all paid plans
GDPR & UK GDPR
DPA available · EU and UK data residency on Enterprise
WCAG 2.2 AA
Audited across the staff app and all portals
Penetration tested
Twice yearly by an independent firm
99.98% uptime
Rolling twelve-month measured availability
Not a list of aspirations. Each of these is implemented, tested and covered by our annual audit.
TLS 1.3 in transit and AES-256 at rest, including backups and the offline store on staff devices. Keys are managed in an HSM-backed service with automatic rotation.
Access is derived from role, home assignment and program. A DSP sees the people they support today; a case manager sees their caseload. Nobody gets a blanket read.
Every read and write of a resident record is logged with actor, timestamp, reason and origin. Logs are append-only and retained for seven years by default.
Mandatory MFA for administrative roles, biometric unlock on mobile, SAML SSO and SCIM provisioning on Scale and above, and enforced session limits.
Continuous replication with point-in-time recovery to any second in the last 35 days. Restores are tested quarterly against a documented RTO of four hours.
Production is fully isolated from staging and development. No production data is ever copied into a lower environment, including for support investigations.
Structured export of every record you have entered, on demand, in machine-readable formats — during your subscription and after it ends.
A published subprocessor list, contractual notice before changes, and annual review of every vendor with access to customer data.
SOC 2 Type II audited annually, penetration tested twice a year by an external firm, and a public disclosure program for researchers.
Portals do not work on trust. Every family member, guardian and case manager has an explicit consent scope, set by you, visible to the person it concerns where they are their own decision maker.
Scoped by person, not by account
A guardian for one resident cannot see anything about another, even in a shared photo or a house-wide update.
Staff approval before anything is shared
Photos and updates queue for house-team approval. Nothing reaches a portal automatically.
Revocable and logged
Consent can be withdrawn instantly. Every portal view is written to the same audit log as staff access.
Capacity respected
Where a person is their own decision maker, they control their own portal scopes — not the provider, and not the family.
In the region you select at sign-up. United States, Canada, United Kingdom and EU regions are available. Data does not leave the selected region for processing, storage or backup, and support access is restricted to personnel authorized for that region.
Send security questionnaires, disclosure reports and audit requests to security@grouphomeos.com. We respond within one business day.
We will hand you the SOC 2 report, a completed CAIQ and architecture documentation before you have signed anything.
Free forever for one home · 30-day trial on paid plans · Export your data any time