Least privilege
Target principle for professional access.
Trust center
Security claims should be earned, specific and verifiable.
Anivow is designing the professional service around least privilege, data minimization and role-aware access. This page separates verified facts from target controls.
Status noteNo production professional service, Anivow SOC 2 report, penetration-test summary or approved BAA was found in the inspected repositories.
Security philosophy
Tenant isolation
Required before professional launch; implementation evidence is not currently available.
Data minimization
Marketing forms and previews are designed to avoid patient health information.
Identity and access
Invitation-only staff accounts, MFA, role assignment, revocation, audit logging and break-glass processes are target controls. They are not presented as implemented.
Data protection
Encryption, storage, backups, retention and deletion require a deployment-specific evidence review. UNKNOWN — requires verification.
Monitoring and response
Incident classification, notification, continuity and recovery procedures require accountable owner approval. No response-time promise is published.
Procurement resources
Security overview
In preparation.
BAA availability
UNKNOWN — requires legal and commercial verification.
SOC 2 / penetration test
Not currently offered based on available evidence.