Security at Younify Health
Younify Health is building a healthcare product with data minimization, bounded access, and evidence-based release decisions at its foundation. This page describes the pre-release public site and controlled integration work—not a production clinical service.
Current security boundary
Minimal public intake
The business form is limited to a contact name, work email, and optional business message. It is not designed to receive patient information, records, credentials, or secrets.
Synthetic testing
Integration validation uses company-controlled accounts and synthetic or vendor-provided test data. Real patient data, clinic exports, personal calendars, and production credentials are outside the approved test scope.
Controlled demonstrations
The approved pre-clinic review model uses supervised sessions hosted by Younify Health with synthetic demonstrations. It does not provide reviewers with reusable product credentials.
Limited retention
Routine public-site logs are retained for up to 90 days. Business-contact records are deleted or de-identified 12 months after the last meaningful contact, subject to narrow security, legal, dispute, and active-relationship exceptions.
Verified controls only
Younify Health publishes present-tense security statements only after the deployed control is verified. Before this site is published, its transport protection, hosting, administrative access, secret handling, logging, deployment controls, and abuse protection must be checked against the actual environment.
Younify Health will name AWS as the site's hosting provider only after the public routes, DNS, TLS, access boundary, and deployment are confirmed in AWS.
What Younify Health does not claim
Younify Health does not currently claim that this pre-release site or product is SOC 2 certified, HITRUST certified, ISO 27001 certified, HIPAA compliant, independently penetration tested, monitored around the clock, or approved for production protected health information.
A vendor name, developer application, or sandbox test does not establish partnership, endorsement, certification, production access, or a completed security review.
Report a vulnerability
Email security@younify.health with the affected URL or component, a concise description of potential impact, safe reproduction steps, and a way to contact you. Do not include protected health information, credentials, secrets, or unlawfully obtained data.
Do not disrupt service, use social engineering, test third-party systems, access or retain data that is not yours, or continue after unintended access. These reporting instructions are not authorization to test Younify Health or another system.
How reports are handled
Younify Health will acknowledge and assess reports as practicable, limit internal disclosure, and coordinate follow-up where appropriate. This page does not establish a bug bounty, legal safe harbor, testing permission, or fixed response-time agreement.
Freshness
Younify Health will revise this page when its deployed hosting, data types, product access, external assessments, certifications, or live integrations materially change.