Built on Transparency and Safety

Encryption in transit

All data transmitted using TLS 1.2/1.3. No unencrypted channels.

Encryption at rest

Sensitive data encrypted at rest using AES-256.

Password security

Passwords hashed with bcrypt. We never store plaintext passwords.

Cloud infrastructure

Hosted on SOC 2 Type II compliant cloud infrastructure.

Access controls

Role-based access control. Least-privilege principle applied throughout.

GDPR compliance

Acules complies with GDPR for users in the European Economic Area and UK.

CCPA compliance

California Consumer Privacy Act rights are honored for California residents.

HIPAA

When acting as a business associate handling PHI on behalf of self-funded plans, Acules operates under a Business Associate Agreement.

Data minimization

We collect only the data necessary to provide our services.

No data selling

Acules does not sell personal data to third parties.

JCI accreditation required

Every partner hospital holds current Joint Commission International accreditation.

Annual re-verification

Accreditation status and outcome data reviewed annually for all partners.

Surgeon credentials

Board certifications verified for surgeons performing Acules-referred procedures.

Outcome monitoring

Complication rates and patient satisfaction scores monitored continuously.

Removal protocol

Hospitals that fall below quality standards are removed from the network.

No payments through Acules

Patients and employers pay hospitals directly. Acules does not hold or process medical procedure payments.

Full cost disclosure

All costs - including the Acules coordination fee - are disclosed before any commitment.

No hidden fees

Cost summaries are itemized and complete. No surprise charges.

Coordination fee only

Acules earns a coordination fee on completed procedures. We are incentivized by your successful outcome.

Refund policy

Our refund policy is disclosed clearly in our Terms of Service.