Security at Companza

Last updated: August 19, 2026

Home care agencies will trust Companza with caregiver records they may one day need to show the state — a Connecticut DCP attestation, or a Pennsylvania direct care worker file requested by the Department of Health. We take that seriously. This page explains, in plain language, how we protect your data. It will be expanded as our platform launches.

Encryption

All data is encrypted in transit using industry-standard TLS (HTTPS), and stored data is encrypted at rest. Your information is protected both while moving between your browser and our servers and while it sits in our systems.

Access controls

Access to data is restricted to authorized personnel who need it to operate the service, and is protected by authentication and role-based permissions. Agencies see their own records; caregivers control their own credential.

Secure hosting

Companza runs on reputable cloud infrastructure with physical and network security maintained by the provider, kept up to date with security patches.

Backups

Data is backed up regularly so your compliance records aren't lost to a single point of failure. Backups are protected with the same care as live data.

Data ownership and export

Your records are yours. Agencies will be able to export their records at any time — the completion records and attestation documents behind Connecticut's annual DCP attestation, and the competency documentation and dated review history that belongs in each Pennsylvania direct care worker's file.

Record retention

Compliance records exist to be produced later, sometimes years later, so we treat retention as a feature rather than an afterthought. Records stay available to your agency for as long as your account is active, and exportable when it isn't.

Responsible disclosure

If you believe you've found a security issue, please email hello@companza.com so we can investigate and address it promptly.