PulsePrep takes security seriously. We use technical, administrative, and organizational safeguards designed to protect user accounts, learning data, performance analytics, and platform operations.
Security Practices
PulsePrep's security practices may include:
- Encrypted transmission of data using HTTPS/TLS.
- Secure cloud hosting infrastructure.
- Authentication and account access controls.
- Role-based access for learners, faculty, administrators, and program users.
- Limited access to production systems.
- Logging and monitoring for reliability and security.
- Payment processing through trusted third-party providers.
- Regular review of platform access and configuration.
- Separation of institutional accounts and permissions where applicable.
Payment Security
PulsePrep may use third-party payment processors such as Stripe. PulsePrep does not store full credit card numbers on its own servers.
User Responsibilities
Users are responsible for protecting their account credentials. Users should:
- Use a strong password.
- Avoid sharing login credentials.
- Log out from shared devices.
- Notify PulsePrep if unauthorized access is suspected.
- Avoid entering patient identifiers or protected health information.
Institutional Access Controls
For institutional customers, PulsePrep may provide role-based dashboards for authorized users. Program leadership may have access to learner performance information depending on institutional setup and permissions.
No Patient Data Intended
PulsePrep is an educational platform and is not designed to collect or store identifiable patient information. Users should not submit patient names, medical record numbers, dates of birth, images, or other identifiable patient details.
Future Compliance Readiness
PulsePrep expects that institutional customers may request additional security documentation, vendor questionnaires, data-processing terms, or compliance materials during procurement. PulsePrep may expand its security program over time to support institutional review, including documentation aligned with common security frameworks when appropriate.
Unless expressly stated in writing, PulsePrep does not represent that it currently holds SOC 2, HITRUST, ISO 27001, or other third-party security certifications.
Security Limitations
No digital platform can guarantee complete security. PulsePrep works to protect user information, but unauthorized access, service interruptions, data loss, software vulnerabilities, or third-party failures may still occur.
Reporting Security Concerns
To report a security issue, contact PulsePrep at Contact@pulseprep.com with the subject line Security Concern. Please do not publicly disclose security issues until PulsePrep has had a reasonable opportunity to investigate and respond.