Security

Last updated: November 1, 2026

Wellficient RD holds information about the residents you serve. Here is how we protect it, in plain words.

HIPAA and your business associate agreement

• We sign a HIPAA business associate agreement with every customer.
• We follow the HIPAA Security Rule for the resident information we handle.

Where your data lives

• Wellficient RD is hosted on Google Cloud, under Google’s business associate agreement.
• Your data is stored only in the United States.
• Today Google Cloud is the only company with access to resident information. Any other company would have to sign a business associate agreement first, and we tell you in writing before that happens.

Encryption

Your data is encrypted in storage and in transit.

Logins and access logs

• Every user has their own login. No shared accounts.
• Wellficient RD keeps access logs.
• Each dietitian signs in and sees their own list.

Backups

We back up your data every day.

How resident information is used

• Only to host, store, back up, maintain and support Wellficient RD for you, and only the minimum needed.
• We may de-identify it only under HIPAA’s de-identification standard (45 CFR 164.514), and only as your business associate agreement allows.

If something goes wrong

If resident information is ever used or shared in a way your business associate agreement doesn’t allow, we tell you in writing within the time that agreement sets, with details as we learn them. We help you meet any notice duty you owe a facility or individuals, and we coordinate with you before contacting them, unless the law requires us to notify them directly.

We give advance notice of planned downtime when we can.

When you leave

When your service ends, we give you a full export of your data, then delete it. Backups expire on their normal schedule, within 30 days, and stay protected until then.

What you can do

Security works best when we share it. On your side:

• Keep each login to one person, and don’t share passwords.
• Tell us when someone leaves your team, so we can close their login.
• Keep the reports you download from PointClickCare on secure devices.
• Don’t send resident information by email or through our contact form.

Report a concern

If you think a login has been misused, or you spot a security problem, email hello@getwellficient.com right away.

See also our Privacy Policy and Terms of Service.