HIPAA Compliance Notice

Our Commitment to Health Data Privacy

Velaris takes the privacy and security of health information seriously. While Velaris is not a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) — we do not provide medical treatment, process health insurance claims, or act as a healthcare clearinghouse — we voluntarily adopt HIPAA-aligned security practices to protect any health-related information our users share.

Technical Safeguards

Velaris implements the following technical safeguards consistent with HIPAA Security Rule requirements:

• Encryption in transit — all data is transmitted over TLS 1.2+ with HSTS preloading
• Encryption at rest — stored data is encrypted using AES-256
• Access controls — role-based access with multi-factor authentication for administrative functions
• Audit logging — comprehensive activity logs for administrative and data-access events
• Session management — secure, short-lived session tokens with automatic expiration

Administrative Safeguards

• Workforce training on privacy and security practices
• Regular risk assessments and vulnerability scanning
• Documented security policies and incident response procedures
• Business associate agreements (BAAs) with relevant service providers

Physical Safeguards

Velaris operates on cloud infrastructure provided by SOC 2 Type II certified providers. Physical access to servers is restricted and monitored by our infrastructure partners.

Your Rights

While HIPAA grants specific rights to individuals regarding their protected health information (PHI), Velaris extends similar rights to all users regardless of HIPAA applicability:

• Access — you can request a copy of your data at any time
• Correction — you can update or correct your information through your account settings
• Deletion — you can request deletion of your data, subject to legal retention requirements
• Restriction — you can request restrictions on how your data is used or disclosed

Important Disclaimer

Velaris is a mental wellness and psychoeducation platform, not a healthcare provider. The information and tools we provide are for educational and informational purposes only and do not constitute medical advice, diagnosis, or treatment. If you are experiencing a mental health crisis, please contact the 988 Suicide and Crisis Lifeline or your local emergency services.

Contact

For questions about our privacy and security practices, please use our privacy inquiry form.