Built to protect patient data,
not just to pass a checklist.
Maxwell handles protected health information for optometry practices. Here's exactly how it's hosted, encrypted, and controlled — no vague marketing claims, just the actual architecture.
HIPAA-compliant hosting on AWS
Maxwell runs entirely on Amazon Web Services under a signed Business Associate Agreement (BAA), using only AWS services eligible for HIPAA workloads. AWS's own infrastructure maintains SOC 2, ISO 27001, and HITRUST certifications, which Maxwell's hosting inherits.
Private network isolation
The patient database runs in a private subnet with no route to the public internet. It's reachable only from Maxwell's own application servers inside the same virtual private cloud (VPC) — there is no direct external access path to patient data.
Encryption everywhere
All data is encrypted at rest (AES-256, via AWS KMS) and in transit (TLS) — the database, every stored document and image, and every request between a patient's browser and Maxwell's servers.
Role-based access control
Every staff account is scoped to a role — front desk, provider, billing, or admin — enforced on the server for every request, not just hidden in the UI. Patients authenticate with a one-time passcode sent to their phone; there are no patient passwords to phish or leak.
Full audit trail
Every access to and change in a patient's record is logged — who, what, and when — independent of the clinical chart itself. Logs are immutable and never contain the underlying patient data, only the fact that an action occurred.
Web application firewall
Every public-facing form — booking, intake, patient portal — sits behind a managed web application firewall that filters malicious traffic before it reaches the application.
Backups & data residency
Patient data is backed up automatically with point-in-time recovery, and never leaves AWS's US-based infrastructure. Maxwell does not sell, rent, or share patient data with third parties.
Need a copy of our Business Associate Agreement, or have a security question?
hello@maxwellsuite.com