Trust & security
How we protect the people who use TailorPath
TailorPath holds sensitive personal and health information for the organisations that use it. Here, in plain words, is how that information is protected and who can see what.
Protecting information
On the way
Every connection to TailorPath is encrypted, so information cannot be read while it travels.
In storage
Sensitive clinical fields are stored encrypted in the database.
In messages
Messages between people and their teams are encrypted in transit and at rest.
Between organisations
Each organisation's data is kept in its own separate space, apart from every other organisation's.
Who can see what
Access follows each user's role and the person's plan. Nobody sees more than their role needs.
Organisation administrator
Sets up the organisation, its templates and its users, and sees the organisation's dashboards.
Professional
Sees and works on the plans of the people assigned to them.
Family member or guardian
Sees what the person's plan shares with them, fills in caregiver questionnaires and messages the team.
The person receiving support
Sees their own plan, missions and messages.
A record of who did what
Access to records and changes to them are logged, so the organisation can see who did what, and when.
AI with a human in the loop
TailorBot makes clear that it is an AI. It answers from the person's own plan, asks for confirmation before it carries out an action or changes a setting it proposes, and supports professional judgement rather than replacing it.
Standards we design to
HIPAA safeguards
Safeguards modelled on the HIPAA Security Rule: encryption, audit trail and role-based access.
GDPR & Israeli privacy law
Designed around the GDPR and Israel's Protection of Privacy Law.
Accessible by design
Built with accessibility standards (IS 5568 / WCAG 2.1 AA) in mind, with read-aloud and large text. A formal accessibility audit is pending.
Human in the loop
Supports professional judgement; never replaces it.
This website
This website does not ask for health information and sets no advertising or analytics cookies. Form records are deleted automatically after 180 days; the email notification sent to our team is kept in our Microsoft 365 mailbox under our email retention policy. The privacy policy has the details.
Read the privacy policyReport a security issue
If you think you have found a security problem, please email us. Our security contact is also published in security.txt.
yochai@tailor-path.comSee TailorPath with your own programme
A 30-minute demo on realistic sample data, or a scoped paid pilot for one ward, clinic or school. We reply within one business day.
Please don't include patient or health information in this form.