Security & Privacy
Resident data, treated like it matters.
You're trusting Title22 with resident health records and staff files. Here's exactly how that information is kept separated, protected, and — always — yours. Plain English, no fine print.
Every facility's records are walled off from every other.
Access is enforced at the database itself, keyed to your facility license — not just hidden in the interface. Your residents, medications, staff files, and incident reports are only ever visible to your own account and the people you invite. Another operator on Title22 cannot see your facility, and you cannot see theirs.
Encrypted in transit and at rest.
Every connection to Title22 runs over HTTPS/TLS, and your data is stored on managed, established cloud infrastructure that encrypts it at rest. Nothing about your facility travels or sits in plain text.
Role-based access, and no shared logins.
Title22 uses four access levels — administrator, supervisor, caregiver, and read-only. Caregivers see only what their shift requires; administrative records stay protected. Every person has their own login, so every entry is permanently attributed to the individual who made it.
A permanent record of who did what, and when.
Changes to residents, medications, MAR entries, staff, and incidents are written to a timestamped audit trail. It's the clean, tamper-evident history a DSS licensing analyst expects to see — and it means nothing has to be reconstructed after the fact.
Your records are yours. Export or leave anytime.
Title22 is built with no lock-in. You can export your facility's records whenever you want, delete them whenever you want, and cancel whenever you want — and if you ever leave, your data leaves with you. We keep your business by being useful, not by holding your records hostage.
We never sell your data.
Your facility's information is used to run Title22 for you — nothing else. It is never sold, rented, or handed to advertisers, and resident information is treated as the sensitive health data it is.
How the AI assistant uses your data — and the line it won't cross.
When you ask the AI assistant a question or open the daily briefing, the relevant facility data needed to answer is sent to our third-party AI provider under commercial terms that do not permit using your data to train their models. And the hard line stays hard: the AI never suggests, corrects, or comments on clinical dosage. Medication decisions belong to physicians and pharmacists — the AI is limited to documentation completeness and compliance guidance.
A note, honestly: Title22 is a documentation and readiness tool, not a certifying body — it helps you see and close the gaps a survey would catch, but staying licensed is your facility's responsibility. Questions about how your data is handled? Email [email protected] and a person will answer.