Security isn't just compliance — it's the trust placed in us
At Elora, we handle some of the most sensitive information in healthcare: the personal stories and needs of the people seeking care. Our approach protects the trust that social workers, healthcare organizations, and their clients place in us.
Data minimization
We collect only what's necessary
Purpose limitation
Data used only for stated purposes
User control
Clear policies on data access and rights
Transparency
Clear communication about data usage
Privacy by design
Built into every feature
FOR IT & SECURITY TEAMS
How Elora runs inside your organization
Deployment
Nothing to install
Elora is a web application hosted on AWS in US regions. Your staff sign in through a browser with your existing SSO and enforced MFA. No on-prem component, no VPN.
EHR Integration
No EHR integration needed
Elora runs on a flat-file export of your patient panel — uninsured, due for renewal, or new intakes — sent on the schedule you choose. No interface project, no vendor coordination, no waiting on your EHR’s integration queue.
Data Boundary
Your data, in your tenant, under a BAA
Every customer runs in an isolated tenant. PHI is encrypted in transit and at rest, retained according to the terms of our BAA, and returned or deleted when you ask.
Patient Communication
A person starts every conversation
Communication begins with your staff at an encounter, where consent to be contacted is captured and logged. Messages go out from your organization, in the patient’s language, on the channel they prefer. Opt-out is honored on every message.
AI & Staff Control
AI drafts. Your staff decide.
Your PHI is never used to train models. AI drafts outreach, reads documents, and prefills applications; a staff member reviews anything that reaches a patient, and every action is attributed to a user and logged. Role-based access separates coordinators, supervisors, and admins.
Reporting
Reporting that holds up in an audit
Extensive per-tenant reporting on outreach, enrollment, and coordinator activity, built for compliance and audit requests. Export anything you need into your own systems.
Ready to put Elora through your security review?
Book a 30-minute demo with Shawn to walk through our architecture, controls, and compliance roadmap with your IT and security team.
