Data Privacy & Security Commitment
1. Encryption & Data Handling
- In-Transit Security: All data submitted through our intake forms is protected using Industry-Standard SSL/TLS Encryption (HTTPS), ensuring information cannot be intercepted during transmission.
- At-Rest Protection: Veteran data is stored on encrypted volumes within secure, enterprise-grade cloud infrastructure.
2. Infrastructure & Hosting Security
- Secure Cloud Provider: VCH is hosted on DigitalOcean, a trusted U.S.-based cloud provider.
- HIPAA Compliance (BAA in Place): VCH maintains a signed Business Associate Agreement (BAA) with DigitalOcean, ensuring that our infrastructure meets HIPAA security and privacy requirements for handling sensitive data.
3. AI Security & Privacy
- PII Minimization: Before any data is sent to AI systems, personally identifiable information (PII) is removed or masked to ensure sensitive veteran data is not exposed.
- No Model Training: Data processed through VCH’s AI features is not used to train or improve external AI models.
- Purpose-Limited Processing: AI is used strictly to assist with claim-related workflows such as document generation and form assistance — never for data profiling or secondary use.
4. U.S.-Based Staffing & Internal Controls
- 100% U.S.-Based Operations: All VCH staff are U.S.-based and subject to domestic privacy laws and background checks.
- Strict Access Controls: We follow the principle of Least Privilege. Access is logged and monitored so only authorized personnel assigned to a case can view records.
- No Monetization: Veteran data is never sold, leased, or monetized. It is used strictly to support claims processing.
5. Compliance & Integrity
- VA Form Automation: VCH securely automates official VA form population, reducing manual handling and limiting exposure of sensitive identifiers.
- Transparency: Veterans maintain full ownership of their records.
“Our mission is to serve those who served. Protecting your data is the foundation of that trust.”