CindyBuilt with security in mind
Cindy answers your calls, talks to your leads and keeps your customer records. We build with that responsibility in mind, and we are open about where we are. Some milestones are complete. Others are still in progress, and we say so.*
Status
- SOC 2 Type II: In progress. We are working toward a SOC 2 Type II report. We have not completed one yet.
- HIPAA: In progress. Cindy is not HIPAA compliant yet. Do not send protected health information through Cindy.
- Encryption in transit: In place. Data sent between your browser or device and Cindy is encrypted over HTTPS.
Health businesses
That includes diagnoses, treatment details and insurance information. Clinics, med spas and other health businesses can use Cindy for bookings, general inquiries, consults and marketing leads.
How we protect your account
- Access limited to your team. Your workspace is available only to the team members you invite, and to an agency if you give one access.
- Call recordings stay with your account. Recordings and transcripts are stored with your account and are not shared with other customers.
- Encrypted in transit. Our website, app and booking pages use HTTPS.
You can help too: invite only the people who need access, remove team members when they leave, and keep sensitive details such as card numbers and health information out of calls and texts.
Report a security issue
If you think you have found a security issue in Cindy, email team@usecindy.com. Please include enough detail for us to reproduce it, and give us reasonable time to fix it before sharing it publicly. Do not access, change or delete data that is not yours, and do not disrupt the Service. We appreciate good-faith reports.
Learn more
See our Privacy Policy and Terms of Service, or email team@usecindy.com with questions.
* Timelines are goals, not guarantees. We'll update this page as each milestone is reached.
