Security, Privacy, and Compliance
At Yosemite Crew, protecting your veterinary pet businesses and pet parents data is not just a feature it’s our foundation. We use enterprise grade security to ensure your data is safe, compliant, and always available.
Compliance & Regulations
GDPR
CompliantFully compliant data processing with EU hosting.
SOC 2 Type I
CompliantAudited security, availability, and confidentiality controls.
ISO 27001
CompliantCertified under ISO 27001:2022.
21 CFR Part 11
CompliantFDA regulations for electronic records & signatures.
🇺🇸
ESIGN Act
CompliantU.S. federal law ensuring validity of e-signatures.
⚖️
UETA
CompliantU.S. state law for electronic transactions.
🇪🇺
eIDAS (SES)
CompliantEU regulation for electronic identification (Level 1).
🇨🇭
ZertES
PlannedSwiss Federal law regulating electronic signatures.
🏥
HIPAA
PlannedProtection for patient health information privacy.
Security Controls
Organizational Security
- ISMS Framework aligned with ISO 27001:2022
- Annual Risk Assessments & DPIAs
- Strict Vendor Management (DPAs signed)
People & Internal Security
- Mandatory Security & Privacy Training
- Background Checks & NDAs for all staff
- Quarterly Access Reviews
Infrastructure Security
- Hosted on AWS (Luxembourg) & Google Cloud
- DDoS Protection & WAF enabled
- Weekly Automated Vulnerability Scanning
Product Security
- AES-256 Encryption (At Rest)
- TLS 1.3 Encryption (In Transit)
- Role-Based Access Control (RBAC)
Resources
SOC 2 Type I Report (2025)
Audit Report
ISO 27001 Certificate
Certificate
Penetration Test Summary (2025)
Security Report
Sub-processors
Have questions about security?
Got questions or found vulnerability? Just reach out to us! Our team is here to help.