Security & Trust

Enterprise-grade governance, from day one

Sharing sensitive telemetry, policy, and claims data requires trust. MyTSP360 is built around consent, access control, and a permanent record of who did what.

The Foundation

Four principles behind every decision

These aren’t marketing language, they’re how access to data is actually structured in the platform.

Consent-based sharing

Nothing moves without an explicit, revocable grant from the data owner. Providers keep control of every relationship, and access can be withdrawn at any time.

Role-based access

Admin, insurer, and provider roles each see only what applies to them. Permissions are scoped by role and by relationship, not granted broadly by default.

Field-level governance

Sharing rules apply down to the individual field, so a partner is authorized to see exactly what they need and nothing more.

Full audit trail

Every access, change, and delivery is permanently logged and available for review, supporting internal audits and partner due diligence.

How It's Built

Security practices across the stack

From the network layer to the people who can access production data.

Encryption in transit and at rest

Data is encrypted moving between providers, the exchange, and insurers, and encrypted in storage.

Least-privilege access

Internal access to production data is scoped to what a role requires, reviewed on a regular basis, and logged.

Segregated environments

Development, staging, and production environments are kept separate, with no live customer data used outside production.

Continuous monitoring

Access and delivery activity is monitored, with alerting on anomalies in how data is requested or moved.

Incident response

A documented process governs how the team detects, contains, and communicates about security incidents.

Compliance roadmap

Our practices are built toward recognized frameworks such as SOC 2. We'll share current audit status and reports with prospective partners under NDA.

Have a security or compliance question?

Talk to our team about audit reports, data processing terms, or how MyTSP360 fits into your vendor review.