Is my data secure? Is Forte HIPAA compliant?

Security is built into every layer of Forte, and it's on by default — there's intentionally very little for you to misconfigure.

What you get out of the box

• DDoS protection and an API gateway in front of every application.
• Authentication for your users, with verification, sessions, and password policies handled for you.
• Secure-by-default configuration, so the room for a misstep is designed out rather than left to you.

Read the security overview for the full picture.

HIPAA

Forte is HIPAA compliant. If you're building something that handles protected health information and need a Business Associate Agreement (BAA), contact us and we'll get one in place.

Have a specific security or compliance question — a vendor review, a data-handling detail, a certification? Reach out and we'll answer it directly.