Data Security

Protecting your health data is core to how Aura is built. This page summarizes the technical and organizational safeguards we use to keep your information safe.

1. Encryption

All data is encrypted in transit using TLS and at rest using industry-standard encryption. Data is never sold and is only ever shared with your assigned care team and the service providers required to operate the Services.

2. Infrastructure

• HIPAA-ready hosting infrastructure with strict access logging.
• Role-based access controls limiting data visibility to authorized care team members only.
• Regular vulnerability scanning and penetration testing of our systems.

3. AI Model Safety

Every model update is reviewed by our Clinical Oversight Board before reaching patients, and AI risk scoring is validated against retrospective clinical datasets to ensure safe, accurate recommendations.

4. Your Controls

You can review, export, or delete your data, and manage which wearables and third-party sources are connected to your account, at any time from within the app.

5. Incident Response

We maintain an incident response process to detect, contain, and notify affected users and partners promptly in the unlikely event of a security incident, consistent with applicable law.

6. Reporting a Concern

If you believe you've found a security issue, please contact us at research@aura-health.net or via our Contact page so our team can investigate promptly.

For more on how we handle your personal information more broadly, see our Privacy Policy.