Security at Mirah

Our approach

Women's health data deserves more than a checkbox. Security is part of product design, engineering reviews, and how support staff access tools.

Technical controls

• TLS encryption in transit and encryption at rest for stored records
• Authenticated APIs and session protections
• Role-based access so internal tools follow least privilege
• Monitoring for unusual traffic and failed access attempts

People and process

Staff who can see production data are limited, trained, and logged. We avoid using real health entries in everyday development.

Your part

• Use a strong unique password or supported sign-in
• Keep the app and device OS updated
• Enable lock screen protection on your phone
• Contact us immediately if you believe an account was accessed without permission

Responsible disclosure

If you believe you found a vulnerability, email our contact address with enough detail to reproduce it. Please do not access other people's data or disrupt the service.