All Tidepool employees undergo annual HIPAA security audits of all computers, accounts and mobile devices used for work purposes.
Tidepool employees are educated yearly and on a continuing basis regarding security practices and information security risks, to include:
Incident response and how to report issues when bad things happen
Mobile device security
Email security and phishing
Tidepool employees are required to use unique, strong passwords and to maintain their passwords in a password manager such as 1Password or LastPass.
All Tidepool employees are required to use 2-factor authentication for all Tidepool accounts.
All Tidepool employees are required to use screen and account locking for computers, filesystem encryption for their computers, and to have strong passwords and encryption enabled for their mobile devices that access Tidepool accounts and use of multi or 2-factor authentication or SSO for all capable services.