We’ve built PractaLuma to meet and exceed modern privacy and compliance standards.
1. HIPAA (USA)
PractaLuma is fully HIPAA compliant, offering a Business Associate Agreement (BAA) for covered entities
This means your health data is handled under strict U.S. federal regulations for confidentiality and security
2. GDPR (EU)
We follow GDPR best practices even for users outside the EU
You control your data and have full access to request deletion or export at any time
3. Australian Privacy & Health Records Acts
PractaLuma is built for Australian clinicians first
We adhere to the Australian Privacy Principles (APPs) and state-based health record laws (like Victoria’s Health Records Act 2001)
4. SOC 2 and Independent Audits
We undergo regular external audits for our infrastructure, systems, and team practices
These ensure your data is secure across technical and organisational layers