Trust center

How WeCare protects your agency's data.

• Tenant isolation: every record carries your organization's ID, and PostgreSQL row-level security refuses any read or write outside it, even if application code has a bug.
• Encryption: HTTPS everywhere; data and backups encrypted at rest.
• HIPAA: every subscriber signs our Business Associate Agreement before activation.
• US-only hosting: data is stored and processed in the United States.
• Payments: card and bank details go directly to Stripe; WeCare never stores them, and no health information is sent to the processor.
• Audit trail: sign-ins, document views, clock events and approvals are logged; clock events and the contract ledger cannot be edited.
• Biometrics: live photos are used only to verify clock events, with written employee consent, and are deleted after separation.