How ADVANCE protects your data.

• Hosted on Cloudflare

  The app and its data run on Cloudflare. Cloudflare encrypts stored data with industry-standard AES-256, and connections to ADVANCE use HTTPS.

• Passwords are never stored

  Only a salted bcrypt hash is kept. Repeated wrong passwords are slowed down and lock the account for a short time, and every account must verify its email.

• Sign-ins that expire

  Each sign-in token lasts four hours and is checked against the account on every request. Renewal tokens are kept only as one-way SHA-256 fingerprints and replaced each time they are used.

• Backed up every night

  The database is copied every night to separate Cloudflare storage, and each copy is deleted after 30 days. Backups leave out passwords, authenticator-app secrets and sign-in sessions.

• A short list of providers

  Cloudflare hosts ADVANCE and Resend sends account emails. For departments that turn on Signal's conversational upgrade, Anthropic and OpenAI process the questions and voice, and only after each learner agrees. We don't attach names or email addresses to those requests, and ADVANCE doesn't store the conversations or recordings, except an answer a learner chooses to report.

• No ads, no trackers

  The app has no advertising and no third-party analytics, and we never sell data. ADVANCE is for training, so please don't enter patient information.

Cloudflare's database service is covered by Cloudflare's SOC 2 and ISO 27001 certifications; those are Cloudflare's certifications, not ADVANCE's. Read the privacy policy, see how to delete an account, or report a security concern.