Security: the essentials.
- 01
Security questions deserve specific answers
ONU’s published approach discusses encryption, limited operational access and data minimization. For a personal decision, read the applicable policies; for procurement, request current technical and contractual evidence. Ask whether a specific integration uses the same controls.
- 02
Distinguish framework alignment from certification
HIPAA, GDPR, ISO and SOC refer to different legal or assurance frameworks. A statement about an approach or alignment is not proof of an active certificate or audit. Ask ONU for the exact scope, current status and evidence relevant to the service you intend to use.
- 03
Protect your own access
Keep credentials private, use the account recovery process intended for the service, and avoid sharing verification codes with someone who contacts you unexpectedly. Use a secure channel for health records. If you suspect an account issue, contact official support with a concise description rather than publishing private screenshots.
- 04
Data rights and incident questions
Read the current Privacy and Health Data policies for the request route and applicable handling of personal information. Business customers should clarify incident contacts and responsibilities in their agreement. The general contact form is not an emergency, medical or incident-response channel.
Learn how ONU handles your information.
