What we can say about compliance, and what we cannot

The four topics below appear in the footer of every page. Each one explains what our statement means and what it does not mean.

HIPAA

What we say. We follow privacy and security practices for applicable protected health information requirements. HIPAA is a United States law. It applies to certain organizations and to certain kinds of health information, depending on the circumstances.

What this does not mean. HIPAA is a legal framework. There is no general HIPAA certification and no official HIPAA logo. This statement does not say that every part of our business is covered by HIPAA. Please do not send protected health information through our website forms.

CCPA / CPRA

What we say. We have privacy practices for applicable California consumer privacy law, which is the California Consumer Privacy Act as amended by the California Privacy Rights Act. We explain these practices in our Privacy Policy.

What this does not mean. These laws are legal requirements, not certifications. There is no official CCPA or CPRA seal.

SOC 2

What we say. We are preparing for a SOC 2 examination. Our readiness work is in progress.

What this does not mean. We have not completed a SOC 2 examination, and we do not hold a SOC 2 report from an independent auditor. Readiness work is not the same as a completed examination. We will say that we have a SOC 2 report only when an independent auditor has issued one.

FDA

What we say. Our production facility is subject to the requirements of the U.S. Food and Drug Administration that apply to it. We describe the status of the facility separately from the status of any product.

Facility status and product status are different.

• A facility can be registered with the FDA, and it can follow the requirements that apply to it. That is a statement about the facility.
• FDA approval of a product is a separate decision about that product. A facility’s status does not mean that every product made there is approved by the FDA.
• The FDA does not issue a general certificate or logo that says a facility is “FDA compliant”. For this reason we do not show any FDA logo.

Our products are not intended to diagnose, treat, cure or prevent any disease unless we say otherwise and have the proper authorization. See our Health and Product Disclaimer.