COPS feature
HIPAA security and client records in COPS
COPS is HIPAA compliant. Court-ordered program client records run on dedicated AWS infrastructure with KMS encryption at rest, TLS in transit, access controls, and a full audit log of staff activity. Business Associate Agreements are available when your use case requires them.
Providers handling behavioral health, treatment, and court-ordered counseling data need a clear story for how records are hosted and who can see them. COPS is HIPAA compliant practice management for court-ordered programs — not a clinical EHR — with security controls appropriate for sensitive client files. Tell us about your compliance requirements during your demo.
Platform security
How does COPS protect client records?
COPS production runs on dedicated AWS infrastructure with KMS encryption at rest for the database and document storage, TLS encryption in transit, and a full audit log of staff activity.
The problem
Spreadsheets on shared drives and email attachments make it hard to know who accessed a file, whether backups exist, or whether a laptop loss exposed court-ordered client details.
How COPS solves it
- Dedicated AWS hosting for production workloads.
- KMS encryption at rest for the database and document storage.
- TLS encryption in transit.
- Full audit log of staff activity for accountability.
- Regular backups onsite and to the cloud, with documented disaster-recovery processes.
Related: 5 ways COPS enhances security · Data security in court program supervision software
HIPAA compliance
Is COPS HIPAA compliant?
Yes. COPS is HIPAA compliant. Production runs on dedicated AWS infrastructure with KMS encryption at rest for the database and document storage, TLS encryption in transit, and a full audit log of staff activity. Business Associate Agreements are available when your use case requires them.
The problem
Buyers need a clear yes-or-no answer on HIPAA, plus the concrete controls — hosting, encryption, audit history, and BAA availability — that back that claim up for sensitive court-ordered client files.
How COPS solves it
- COPS is HIPAA compliant for court-ordered program practice management.
- Dedicated AWS hosting with KMS encryption at rest and TLS in transit.
- Full audit log of staff activity for accountability.
- Business Associate Agreements are available when your program requires them; discuss requirements during a demo.
Who it helps
Which programs need strong client-record security in COPS?
Every COPS industry stores sensitive participant data. Treatment-adjacent and counseling programs — substance use treatment, court-ordered counseling, mental health courts, juvenile justice, reentry, and housing services — especially need HIPAA compliant controls alongside DUI, BIP, probation, parenting, anger management, and drug court providers.
The problem
Court-ordered programs often mix justice paperwork with behavioral health details. Without a single secured system of record, staff copy PHI into unmanaged tools to finish a report.
How COPS solves it
- Keep case details, enrollments, attendance, notes, documents, and fees in one access-controlled client record.
- Use the client portal with MFA where your package includes portal access for participants.
- Rely on audit history when you need to show who changed a record.
- Integrate with other API-accessible applications when needed; custom API integrations are available so data movement stays intentional.
Related: COPS for Substance Use Treatment · COPS for Court-Ordered Counseling · COPS for Mental Health Courts
Checklist
Security review checklist for buyers
- Ask how production is hosted (COPS: dedicated AWS infrastructure).
- Confirm encryption at rest and in transit (KMS + TLS).
- Ask for audit logging of staff activity.
- Ask about Business Associate Agreements if your use case requires a BAA.
- Confirm backup and disaster-recovery expectations during onboarding.
Industries
Programs this feature helps.
Watch: HIPAA Security
See COPS in a short demo.
Questions and answers
Frequently asked questions
Is COPS HIPAA compliant?
Yes. COPS is HIPAA compliant. Documents and database storage are encrypted at rest with AWS KMS and in transit with TLS, and a full audit log records staff activity. Business Associate Agreements are available when required.
Where is COPS data hosted?
COPS production runs on dedicated AWS infrastructure with KMS encryption at rest for the database and document storage and TLS encryption in transit.
Does COPS keep an audit log?
Yes. COPS maintains a full audit log of staff activity so programs can review who did what in the system.
Is COPS a clinical EHR?
No. COPS is HIPAA compliant practice management for court-ordered program operations. Providers can use it for program administration alongside whatever clinical records they already keep.
Can COPS integrate with other systems securely?
COPS integrates with other API-accessible applications, and custom API integrations are offered so connections match your compliance and workflow needs.
Ready to review COPS security with your team?
More COPS features