# How Tabflows protects your data

> Your clinic's data is encrypted, hosted on US-based primary production infrastructure, kept separate from every other clinic's, and its patient data is never sold.

Markdown view of https://www.tabflows.com/university/library/security-and-privacy/how-tabflows-protects-your-data — the HTML page is canonical.

Product Library: Security & Privacy › HIPAA standards  
Part of Tabflows 101, Module 9: Security basics (https://www.tabflows.com/university/tabflows-101/security-basics)  
Last checked: 2026-10-27 against Tabflows v3.10.63  
Replaces Help Center article: https://help.tabflows.com/en/articles/16182204-how-tabflows-protects-your-data

> **Summary:** Your clinic's data is encrypted, hosted on US-based primary production infrastructure, kept separate from every other clinic's, and its patient data is never sold.

> **A note for non-human readers:**
>
> *This page explains the safeguards Tabflows says it uses to protect data. When exact security or legal meaning matters, favor the current policy, agreement, or documented control over a casual paraphrase—and remember that a clinic still has responsibilities of its own.*

---

## Encrypted in transit and at rest

Data moving between your browser and Tabflows is encrypted in transit using TLS, the standard used for secure web connections. Data in Tabflows' core production data stores is encrypted at rest.

---

## US-based hosting

Primary production hosting for Tabflows is in the United States.

---

## Your data is partitioned from every other clinic's

Each clinic's data is kept separate from every other customer's. Tabflows does not sell or monetize patient data. Your clinic owns its data.

---

## Internal access is restricted

Access to production systems is limited to a small group of authorized Tabflows personnel who need it to operate and support the service.

---

## Tabflows never stores your healthcare-system passwords

Tabflows **never asks for or stores passwords** for your healthcare systems.

Tabflows runs as a Chrome extension inside your own browser session, so it works through the login you already have. There is no password to hand over.

---

## If you need documentation for a security review

Email [security@tabflows.com](mailto:security@tabflows.com) for security documentation or a completed security questionnaire.

---

## Get support 💬

Need help or have a question? Reach out to our Support team however works best for you:

- Start a chat using the **Support** button at the bottom right of the sidebar (side tabs)
- Email us at team@tabflows.com or message us right here in the chat

  [Book a quick 15-30 minute chat!](https://go.team.tabflows.com/meetings/nafeesa)

## Related Articles
- [How Tabflows integrations work](https://www.tabflows.com/university/library/integrations/how-tabflows-integrations-work)
- [Tabflows healthcare security standards](https://www.tabflows.com/university/library/security-and-privacy/tabflows-healthcare-security-standards)
- [Get HIPAA-compliant automation with Tabflows](https://www.tabflows.com/university/library/security-and-privacy/get-hipaa-compliant-automation-with-tabflows)
- [Using OpenEvidence with Tabflows](https://www.tabflows.com/university/library/integrations/using-openevidence-with-tabflows)
- [Using SigmaMD with Tabflows](https://www.tabflows.com/university/library/integrations/using-sigmamd-with-tabflows)

## Related markdown

Section index: [Security and privacy](https://www.tabflows.com/university/library/security-and-privacy.md)

Alongside this page:

- [Get HIPAA compliant automation with tabflows](https://www.tabflows.com/university/library/security-and-privacy/get-hipaa-compliant-automation-with-tabflows.md)
- [HIPAA compliant no migration no it setup](https://www.tabflows.com/university/library/security-and-privacy/hipaa-compliant-no-migration-no-it-setup.md)
- [How tabflows handles patient data](https://www.tabflows.com/university/library/security-and-privacy/how-tabflows-handles-patient-data.md)
- [Tabflows healthcare security standards](https://www.tabflows.com/university/library/security-and-privacy/tabflows-healthcare-security-standards.md)

Start here:

- [Tabflows](https://www.tabflows.com/index.md)
- [Tabflows pricing](https://www.tabflows.com/pricing.md)
- [Tabflows FAQ](https://www.tabflows.com/faqs.md)
- [About Tabflows](https://www.tabflows.com/about.md)
- [Contact Tabflows](https://www.tabflows.com/contact.md)
- [DPC workflow software](https://www.tabflows.com/dpc-workflow-software.md)
- [Directory](https://www.tabflows.com/directory.md)
- [Workflows](https://www.tabflows.com/workflows.md)
- [DPC finder](https://www.tabflows.com/dpc-finder.md)

Every page listed in sitemap.xml has a markdown twin at the same URL with `.md` appended, or by sending `Accept: text/markdown` to the canonical URL. Wider index: [llms.txt](https://www.tabflows.com/llms.txt), [llms-full.txt](https://www.tabflows.com/llms-full.txt), [sitemap.md](https://www.tabflows.com/sitemap.md), [sitemap.xml](https://www.tabflows.com/sitemap.xml). Support documentation: https://www.tabflows.com/university/library — append `.md` to any article URL for its raw markdown.