Security & HIPAA
Built to hold patient information
Ambulance companies are covered entities under HIPAA. We are your business associate, and we act like it — from the first day.
How we protect your data
Your own private system
Every company runs on its own server and its own database on Google Cloud — never shared with another company.
HIPAA, in writing
We sign a Business Associate Agreement with you before any patient information arrives, and hold BAAs with the services we use.
Encrypted everywhere
HTTPS for every connection; disks and backups encrypted; nightly locked off-site copies with a weekly restore test.
Every access recorded
Who opened which record and what was disclosed to whom, kept in an audit log you can see.
AI under contract
Luna runs on AI providers under business associate agreements. Your data is never used to train their models.
No names in texts
Texts to crews and staff carry counts and links, never a patient’s name. The details stay behind sign-in.
How your system is set up
When your application is approved we create a private system just for your company on Google Cloud: its own server, its own encrypted database and its own address. No other company's data is ever in it, and yours is never in theirs.
Who can see what
Your administrators decide which of your staff can open which parts of the system. Every view of a patient's record and every disclosure is written to an audit log.
Backups you can trust
Your database is copied nightly, locked with encryption before it leaves the server, to private storage — and once a week a copy is opened and checked, so a restore is never a surprise.
Texts and AI
Texts to your crews and staff never carry a patient's name: they say how many and link to the details behind sign-in. Luna uses AI providers that have signed business associate agreements and do not train on your data.
In writing
We sign a HIPAA Business Associate Agreement with you during onboarding, before any patient information reaches us.