Security & Compliance

Last updated: July 26, 2026 · Applies to alliancegrouphome.com and the systems behind it.

Our commitment in one paragraph

Alliance Group Home holds itself to healthcare-grade privacy and security standards. This website is built to be HIPAA-aware, it honors the data-protection rights described in the EU/UK GDPR, and it runs on cloud infrastructure that maintains SOC 2 Type II and ISO/IEC 27001 certification. Below we explain plainly what each of these means, and exactly how far it goes, so you never have to take a vague promise on faith.

HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) governs how protected health information (PHI) is used and safeguarded. Here is how it applies to this website:

• This website is designed not to collect PHI. The contact, tour, and careers forms request only the information needed to reach you and arrange a visit. Visitors are asked not to send health details through the site, so the website is kept out of scope for the most sensitive category of data.
• HIPAA-aware engineering throughout. All traffic is encrypted in transit with HTTPS/TLS. Information you send is stored encrypted at rest, is reachable only by authenticated Alliance Group Home staff, and is retained only as long as needed to serve you. Administrative access is protected by individual accounts, strong password hashing, and session controls.
• Care records are handled under HIPAA offline. As a residential care provider, Alliance Group Home treats resident health information as confidential and manages it in accordance with HIPAA and applicable Minnesota law. Our full Notice of Privacy Practices describes those rights and safeguards.

Note on scope: HIPAA compliance is a property of an organization and its full data-handling practices, not a certificate a website earns on its own. Because this public website does not gather or store PHI, it does not create HIPAA exposure. Any Alliance Group Home system that does handle PHI is operated under a signed Business Associate Agreement (BAA) with its provider, as HIPAA requires.

GDPR & privacy rights

The EU/UK General Data Protection Regulation (GDPR) sets a high bar for how personal data is collected and respected. This site is built around its core principles:

• Data minimization. The site loads no advertising pixels, no third-party trackers, and no social-media embeds. Fonts and images are served from our own domain. By default it sets no tracking cookies.
• Lawful, transparent use. The only personal information we receive is what you choose to send us, used solely to respond to you and never sold or rented.
• Your rights, honored. You may request access to, correction of, or deletion of your information, object to or restrict processing, and withdraw consent at any time. To exercise any right, email alliancegrouphome@gmail.com or call 612-281-0077. Full detail lives in our Privacy Notice.

SOC 2 Type II & ISO/IEC 27001

SOC 2 Type II and ISO/IEC 27001 are the two most recognized independent audits of how well an organization secures data. Rather than claim certifications this small home has not itself undergone, we made an engineering choice that gives you the real protection they represent: we host on infrastructure that holds these certifications.

• Certified cloud foundation. The website and its data run on cloud platforms whose underlying infrastructure maintains active SOC 2 Type II and ISO/IEC 27001 certification, with audited controls for physical security, encryption, access management, monitoring, and incident response.
• Encryption end to end. Data is encrypted in transit (TLS) and at rest, on managed, access-controlled database and storage services.
• Least-privilege access. Application data is not publicly reachable; row-level security and authenticated, role-based accounts gate every path to it.

Note on scope: these certifications belong to the hosting providers whose infrastructure we build on. Alliance Group Home benefits from their audited controls but does not claim to have completed its own independent SOC 2 or ISO 27001 audit. We state this distinction plainly on purpose.

How we protect your information, in practice

• HTTPS/TLS encryption on every page and form submission;
• Encryption at rest for all stored inquiry and application data;
• Authenticated, role-based staff access with strong password hashing and session expiry;
• No third-party trackers, ad pixels, or data brokers;
• A self-hosted human-verification step and spam controls on public forms;
• Data retention limited to what is needed, then deleted.

Questions or requests

To ask about our security practices or exercise a privacy right, contact us any time.

Alliance Group Home · 2205 Marshall St. NE, Minneapolis, MN 55418 · 612-281-0077 · alliancegrouphome@gmail.com