SecurityOverview

Introduction

SBN Healthcare Solution LLC (“SBN,” “we,” “our,” or “us”) recognizes that information security is fundamental to maintaining the trust of our customers, business partners, and healthcare organizations.

Our approach to security is based on protecting the confidentiality, integrity, and availability of information through administrative, technical, and organizational safeguards that support responsible business operations.

This Security Overview provides a high-level description of our security practices and should be read together with our Privacy Notice, Compliance Overview, and Terms of Service.

Our Security Approach

Security is an ongoing business responsibility rather than a one-time activity. SBN is committed to maintaining security practices that help protect business information, customer information, and operational systems throughout the lifecycle of our services. Our security program evolves continuously as technology, business requirements, and industry expectations change.

Security Principles

Our security practices are guided by the following principles:

• Confidentiality
• Integrity
• Availability
• Accountability
• Continuous Improvement

These principles support responsible information management across our business operations.

Information Protection

SBN implements administrative, technical, and organizational safeguards designed to help protect information throughout its lifecycle. Depending on business requirements, these safeguards may include:

• Appropriate access controls
• Authentication mechanisms
• Encryption during information transmission where appropriate
• Secure information handling practices
• Audit logging
• Periodic review of access permissions

Security measures are reviewed periodically to support continuous improvement.

Identity and Access Management

Access to business systems and information is managed according to business responsibilities. Where appropriate, SBN applies security practices including:

• Role-based access
• Least privilege principles
• User authentication
• Periodic access reviews
• Account lifecycle management

Access is limited to authorized individuals based on operational requirements.

Secure Development

Security considerations are incorporated throughout the design, development, deployment, and maintenance of technology solutions. Our development practices may include:

• Code review
• Security testing
• Change management
• Controlled deployment processes
• Ongoing improvements to development practices

Business Continuity

Business continuity planning supports the ongoing availability of critical business operations. Where appropriate, continuity planning may include:

• Backup procedures
• Recovery planning
• Operational resilience
• Continuous improvement

Third-Party Risk Management

SBN may work with carefully selected third-party service providers that support our business operations. Where appropriate, third-party providers may be evaluated based on business, operational, privacy, contractual, and security considerations.

Continuous Improvement

Security is an ongoing process. SBN periodically reviews its security practices, policies, and operational procedures to support evolving business needs, customer expectations, emerging risks, and changes in technology.

Security Reporting

If you believe you have identified a potential security issue involving SBN Healthcare Solution LLC, please contact us using the information provided below. Additional guidance regarding responsible security reporting may be published in the future through our Responsible Disclosure page.