A one-page summary for IT, privacy and procurement teams.
No patient data
UnitOps handles staff scheduling only. It does not collect, store or need any patient health information.
Hosting and encryption
UnitOps is hosted on Base44, a platform that is SOC 2 Type II and ISO 27001 certified. Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256), including backups.
Data separation
Every record is tagged to one organization, and access rules on the server stop anyone from reading another organization's data.
Role-based access
Admins, managers and staff each see only what their role allows. Nurses see their own preferences and awards, never anyone else's.
Server-checked actions
Assignments, awards, live offers and fairness checks run on the server, not in the browser, so results can't be changed from the screen.
Privacy on shared screens
The Shuffle Board never shows phone numbers or preference lists, and can show initials or seniority numbers only. Huddle links are hard to guess and can be turned off.
Full record
Every award and manager override is logged with who, when and why.
Sign-in
Email and password with email verification, or Google sign-in.
Security questions? Contact us.
SOC 2 report for our hosting platform available on request.