MilitaryMedicine Security and Data Handling
Veterans share health and claim details with us, and representatives trust us with their intake. This page explains how MilitaryMedicine protects that data, who can see it and how you can remove it. MilitaryMedicine is not a healthcare provider, and veterans control what they send.
Encryption in transit and at rest
Every page and every request uses an encrypted connection. Stored data, including match requests and account details, is encrypted at rest.
Role-based access
Representatives see only the match requests sent to their own inbox. Firm and Enterprise plans add roles, so each team member sees only what their role allows. Our own staff access data only when needed to run or support the service.
SSO and audit log on Enterprise
- Single sign-on with SAML for your team.
- Roles for intake staff, attorneys and administrators.
- An audit log of sign-ins and key actions.
- A 99.9 percent uptime SLA, on Enterprise only.
Data minimization
We ask only for what a representative needs to answer a request: conditions, ratings, claim stage, state and an email address. The calculator works without an account, and we do not ask for your Social Security number or full medical records.
Veterans control what they send
MilitaryMedicine is not a healthcare provider and does not treat or diagnose anyone. A veteran decides which conditions and ratings to include, and a request goes only to the accredited representatives who serve that request type.
Retention and deletion
We keep data only as long as we need it to run the service. You can ask us to delete your data at any time by emailing [email protected], and we confirm by email when it is done.
Hosting and payments
The service runs with a hosting provider in the US or EU. Representative subscriptions are paid through a payment operator, and we never store card numbers ourselves.
Report a security issue
If you find a security problem, email [email protected] with the details and steps to reproduce it. Please do not access or change data that is not yours while testing.