Security

We protect your account and your practice with the same care we protect what is sacred.

In transit

Every connection is encrypted with modern TLS. Nothing travels in the open.

Your account

• Passwords are stored only as strong one-way hashes (bcrypt) — never in readable form, never visible to us.
• Sessions use signed tokens with short lifetimes; sign-out clears them.
• We run our own authentication — your identity is not handed to third-party trackers.

Minimal by design

The safest data is the data we never collect. Trinity holds only what serves your practice, which keeps the surface for harm small by design.

Responsible disclosure

If you believe you have found a security issue, please tell us quietly first so we can protect practitioners. Write to [email protected] and we will respond with care.