Privacy Practices

• We will never rent or sell your information or data to anyone. We never use or transfer your data for serving ads, including retargeting, personalised, or interest-based advertising.
• We will never provide any part of your information to anyone unless explicitly agreed by you.
• Please refer to our Privacy Policy for more information.

Cloud Infrastructure

• Nexus Healthinsta LLP is hosted on a Virtual Private Cloud which provides a secure and scalable technology platform to ensure we can provide you services securely and reliably. Our infrastructure is launched in compliance with recognized cloud architecture best practices and incorporates industry-standard security frameworks.
• We use HTTPS protocol for our website and applications (hereinafter referred to as "Platform"). All communication between the Platform and our servers are protected via 256-bit encrypted HTTPS protocol. This prevents MITM (Man in the Middle) attacks on our platform and connection between us and our user is fully secure. We have strict network segmentation and isolation of environments and services in place.

Host Security

We use industry leading solutions around anti-virus, anti-malware, intrusion prevention systems, intrusion detection systems, file integrity monitoring, application control, application and audit log aggregation, and automated patching.

All our servers are hardened in line with recognized security benchmarks for their operating system.

Data Security

• User log-in is protected with strong authentication on the Nexus Healthinsta LLP website and application.
• All user data and internal stored data is protected by encryption at rest, and sensitive data by application-level encryption.
• We employ separation of environments and segregation of duties, and have strict role-based access control on a documented, authorized & need-to-use basis.
• We use key management practices to limit access to data except the data team.
• We use data replication for data resiliency & disaster recovery, snapshotting for data durability, and backup/restore testing for data reliability.
• We only use anonymized and aggregated data for internal analytics and business intelligence purposes.

Incident and Change Management

• We have deployed mature processes around Change Management which enables us to release thoroughly tested features for you both reliably and securely, enabling you to enjoy the Nexus Healthinsta LLP experience with maximum assurance and security.
• We maintain a proactive stance on Incident Management for both systems downtime and security, with processes in place to quickly react to, remediate, or escalate any incidents arising out of planned or unplanned changes.

Vulnerability Assessment and Penetration Testing

• We work with a network security team that uses industry-leading products to conduct manual and automated VA/PT activities, including penetration testing of all applications and endpoints.
• We employ both static application security testing and dynamic application security testing, incorporated into our development pipeline.
• We periodically engage external auditors to perform independent testing and audits.

Responsible Disclosure

• We at Nexus Healthinsta LLP are committed to our users' data and privacy.
• We blend security at multiple steps within our products with modern technology to ensure our systems maintain strong security measures.
• Our overall data and privacy security design allows us to defend our systems from various attacks.
• If you are a security enthusiast or a researcher and you have found a possible security vulnerability on Nexus Healthinsta LLP, we encourage you to report the issue to us responsibly.
• You could submit a report to us through the in-app Support option with detailed steps required to reproduce the vulnerability.
• We shall put our best efforts into investigating and fixing legitimate issues in a reasonable time frame, meanwhile requesting you not to publicly disclose it.

Data Backup Policy

• We perform regular, automated backups of all critical application and user data to ensure business continuity and protection against data loss.
• Backups are encrypted both in transit and at rest, and stored in geographically redundant locations to protect against localized failures or disasters.
• We periodically test our backup restoration process to verify data can be recovered accurately and within our defined recovery time objectives.
• Backup data is retained in accordance with our Data Retention Policy and applicable legal and regulatory requirements.

Report Security Issue

• If you believe you have discovered a security vulnerability or issue affecting Nexus Healthinsta LLP, please report it to us immediately through the in-app Support option or via our official contact channels.
• Please include as much detail as possible, including steps to reproduce the issue, so our team can investigate promptly.
• We request that you do not publicly disclose any vulnerability until we have had a reasonable opportunity to investigate and address it.

System Status

• We continuously monitor the availability and performance of the Nexus Healthinsta LLP platform to ensure reliable service for all our users.
• In the event of any planned maintenance or unplanned downtime, we aim to notify affected users in advance or as soon as possible, along with expected resolution timelines.
• For current platform status or to report an outage, please contact us through the in-app Support option.