Security program
Yura maintains a security program focused on protecting accounts, connected wellness data, product infrastructure, internal systems, and user-directed sharing workflows. Security responsibilities are built into product development, infrastructure operations, vendor review, and support processes.
Data protection
- Yura uses HTTPS/TLS to protect data transmitted between supported clients, websites, APIs, and infrastructure providers.
- Production systems use managed infrastructure controls for encryption, backups, secrets handling, and access management where supported.
- Connected wellness information is processed for product functionality, user-controlled sharing, support, reliability, security, and compliance.
- Operational data is segmented from public website assets and protected according to sensitivity.
Access controls
Yura applies least-privilege access, role-based permissions, administrative access review, credential protection, and environment separation. Internal access to sensitive systems is limited to personnel and service providers with a business need.
Administrative workflows are supported by logging, authentication controls, and review procedures appropriate to the sensitivity of the system.
Vendor management
Yura uses third-party service providers for infrastructure, hosting, analytics, communications, support, and security operations. Vendors that process personal information are reviewed for appropriate privacy and security commitments, and they are expected to use information only to provide services to Yura.
Product controls
Yura is designed around user-directed device connections, clear sharing actions, controlled summaries, account-level preferences, and permission-aware workflows. Users can see when they connect a source, disconnect a source, or share information with another person or organization.
Monitoring and reliability
Yura monitors systems for availability, errors, suspicious activity, and security events. Logs and diagnostics are used to investigate issues, protect users, improve reliability, and maintain service quality.
Incident response
Yura maintains procedures for triaging security reports, investigating suspected incidents, assessing potential impact, containing issues, preserving relevant evidence, and notifying affected users or authorities when required by law.
Responsible disclosure
If you believe you found a security vulnerability, use the Contact the team form and select privacy, security, or compliance as the topic. Include the affected URL or feature, steps to reproduce, potential impact, and any relevant screenshots or logs.