We take security as seriously as you take patient care
Hospitals run on trust, and Banquet is built for it. Our infrastructure is cloud-native and engineered to protect patient data at every step.
HIPAA compliant · SOC 2 Type II report available under NDAHow we protect your data
Encrypted by default
All data, at rest or in transit, is encrypted with AES-256 and TLS 1.2+. Databases run on encrypted AWS RDS instances in private subnets, with regular backups.
Strict access controls
Production is separated from everything else at the infrastructure level. Access requires MFA and least-privilege IAM policies, and all of it is logged and audited.
Secure by design
Services run in isolated, short-lived environments on modern cloud infrastructure, which keeps the attack surface small.
What your IT and compliance teams will ask about
HIPAA
We sign Business Associate Agreements with covered entities. PHI is encrypted and access-controlled, and every employee completes HIPAA training.
Access and monitoring
Least-privilege access, SSO and MFA, with complete logging and real-time alerting.
Secure development
Peer-reviewed code, automated testing, continuous vulnerability scanning and regular dependency audits.
Change control
We ship fixes and security updates continuously, and your team chooses when to turn on new features.
Our whole team
Background checks, mandatory security training, a defined incident response process and a way to report vulnerabilities.
Security isn't a checkbox for us. It's a responsibility we carry because lives depend on it.
Nivi JayasekarCo-Founder & CTORunning a security review?
We'll send documentation, answer your IT questionnaire and set up a BAA.