Enterprise-Grade Security for Peace of Mind
Architected from the ground up to protect your staff, your facility, and your residents.
Built on Enterprise Defense Frameworks
Cherra was engineered and is continuously monitored by certified IT systems administration and cybersecurity defense professionals. Our infrastructure security, vulnerability protocols, and data-in-transit encryption methodologies are aligned directly with DoD-approved baseline frameworks.
Our continuous operational compliance and infrastructure security are overseen by leadership holding active, industry-standard technical credentials:
- CompTIA Security+ Certification — Advanced Cryptography, Identity Access Management (IAM), & Risk Mitigation Standards.
- CompTIA Network+ Certification — Secure Cloud Infrastructure Architecture & Network Resilience.
- Systems Administration Expertise — Government-grade IT compliance and continuous infrastructure auditing.
1. Data Encryption At-Rest
All data stored within Cherra’s cloud ecosystem is safeguarded using enterprise-grade AES-256 bit encryption handled securely via AWS Key Management Service (KMS). Even in the static storage layer, your records remain completely unreadable to unauthorized parties.
2. Data Encryption In-Transit
Every single connection between your facility’s mobile devices, tablets, or computers and Cherra’s servers is strictly forced over secure HTTPS utilizing TLS 1.2 or TLS 1.3 protocols. This prevents any data interception on local facility Wi-Fi networks.
3. Structural PHI Separation
Cherra enforces a strict database tokenization model. Direct patient or resident identifying information (such as full names) is completely decoupled and isolated from day-to-day operational task routing and shift handover logs, securely safeguarding identity.
4. Zero PHI in System Logs
Our backend server logs are completely tokenized. If a system event or code error occurs, our internal telemetry trackers log only randomized alphanumeric IDs—never resident names or sensitive medical statuses—ensuring Protected Health Information (PHI) never leaks into technical logs.
Regulatory & Operational Compliance
- Active HIPAA Compliance: Cherra operates under a legally executed and binding institutional Business Associate Agreement (BAA) with Amazon Web Services (AWS), ensuring our underlying cloud infrastructure meets strict federal guidelines.
- Tamper-Evident Audit Trails: To assist your facility during state inspections, our architecture permanently logs key operational events. Leadership can quickly export clean, unalterable history reports of staff tasks and shift handovers to prove continuous quality of care.
- Role-Based Access Control (RBAC): Your facility administrators have total control. Staff accounts are strictly restricted by role, ensuring floor staff, nurses, and managers only have access to the specific data required to fulfill their active shift duties.
- Continuous Vulnerability Monitoring: Our infrastructure undergoes automated scanning to identify and mitigate threats before they impact your workflow, keeping your operational environment secure 24/7/365.
Healthcare communication and management for the teams who never stop caring. A NurturLink platform.
Subscribe to Our Newsletter
Get the latest articles, news, and free resources, delivered to your inbox weekly.