Security and privacy
You are trusted with health information about vulnerable adults. Senior Center HQ is built around protecting it.
In short: each center runs on its own private instance and database, never shared with other centers. People sign in with a one-time code sent by email, see only what their role allows, and every page they view is recorded in an audit log. Attendance, rides and incidents cannot be edited or deleted, only corrected with a new entry. Health details are never sent by text message or notification.
Safeguards built in, not added later
One private instance per center
Your own application and database. No shared tables with other centers.
Passwordless sign-in
A one-time code by email at the network edge, before anyone reaches the application.
Role-based access
Owners, staff, drivers and families each see only what they need.
Audit log
Every page viewed by every user is recorded, and the log itself cannot be edited.
Append-only records
Attendance, rides, meals and incidents are never overwritten. Corrections are added with who and when.
Tamper-evident attendance
A hash chain links every check-in; the monthly report verifies it.
No health data in messages
Texts and notifications never include diagnoses, allergies or other health details.
Photo privacy
GPS data removed on upload, consent checked for every person tagged, deleted after 60 days.
Backups
Daily database backups plus server snapshots.
HIPAA and your center
HIPAA applies to health care providers that transmit health information electronically in standard transactions, such as insurance claims. Many private-pay adult day centers are not covered entities, but families still expect their information to be protected as if they were.
Senior Center HQ is designed around HIPAA's safeguards: access control, audit controls, integrity of records and transmission security. When you bill insurance or Medicaid, we sign a Business Associate Agreement (BAA) with your center.
Senior Center HQ is software, not legal advice. Confirm your obligations with your attorney or compliance consultant.
Frequently asked questions
Is my data mixed with other centers' data?
No. Each center has its own private instance and its own database.
Who at Senior Center HQ can see my participants' information?
Only what is strictly needed for support you request. Our management console shows business information about each center, not participant records.
Can I export my data?
Yes. Your data belongs to your center. Reports print and export, and we provide a full export if you ever leave.
See your center running on Senior Center HQ
A 30-minute walkthrough with real screens: attendance, routes, billing and the family portal. In English or Spanish.