Security & Compliance
Protecting Employee Health Data
Health information is among the most sensitive data an organization handles. Employee health data security is built into how MeWeSalus Care designs its programs, chooses partners and reports to employers.
Our Principles
Privacy by Design
Consent First
Employees are told what is collected and why, and their consent is recorded before health data is processed.
Employers See Aggregates
HR receives anonymised, aggregated reports – never individual medical records.
Least-privilege Access
Only the people who need data to deliver care can access it, with access logged.
Encryption
Data is encrypted in transit and at rest.
Data Minimisation
We collect only what is needed and retain it only as long as required.
Vetted Partners
Providers and technology partners are assessed for security and confidentiality.
Frameworks
Built on Recognised Standards
Our policies and controls are designed around these frameworks. Formal certifications are in progress – we will list them here once awarded.
- DPDP Act 2023India's Digital Personal Data Protection Act
- ISO 27001Information security management – aligned
- SOC 2Security & confidentiality controls – aligned
- HIPAAHealth data safeguards – aligned principles
- GDPRPrivacy principles for global teams
Your Rights
Employees Stay in Control
Employees can ask to access, correct or delete their personal data and withdraw consent at any time. Read our Privacy Policy or write to our privacy team for any request.
Questions?
Need Our Security Documentation?
Security and procurement teams can request our data-protection documentation and questionnaire responses.