Security & privacy
Your health data stays yours.
Labs, care plans, and company information hold some of the most sensitive information you have. We protect it with the safeguards healthcare requires.
How we protect it
Safeguards built into rootOS
Security isn’t a feature we add on. It shapes how we build the platform, how our team works, and which partners we choose.
-
Private by design
All health information is encrypted. You control who can see your data. We never sell or share it with advertisers or data brokers.
-
Secure by default
Security is built into every layer of Root. From authentication to infrastructure, we use strong encryption, trusted identity controls, and modern security tooling to keep your information protected.
-
Smart, continuous protection
Our platform uses real-time monitoring, automated threat detection, and always-on scanning to stop issues before they reach you.
-
Responsible with data and AI
We’ve built Root with responsible technology from the start. Any use of AI at Root follows strict privacy and security controls.
Standards we hold ourselves to
As a clinical provider, Root operates under the same privacy rules as your doctor’s office and your hospital.
Health Insurance Portability and Accountability Act
We follow HIPAA privacy, security, and breach notification rules for all protected health information.
SOC 2 Type II
Our controls for security, availability, and confidentiality are audited annually by an independent firm.
Independently Verified
Trusted third parties regularly assess Root to ensure it meets the highest standards for data protection.
Offer care your team can trust.
Root brings clinically validated functional medicine to your people, with the privacy and security your benefits program requires.