Keeping Your Information Safe
Your profile is public because you want clients to find you. Everything else — your license numbers, insurance, documents and billing — is private, and has no public door at all.
What’s Public, and What Isn’t
Anyone Can See
- Your name, credentials, photo and logo
- Your bio, focus areas, languages and fees
- The states you’re licensed in
- The email, phone and links you choose to list
- Your office city — and your street address only if you turn it on
Only You and PE+Co Can See
- Your license numbers
- Your insurance policy details
- Documents you upload (license, insurance certificate, W-9)
- Your account email, billing, and the agreements you signed
- Anything you give us privately
The private side isn’t just hidden from view. The public directory has no way to reach it, the same way a store window shows what’s for sale but doesn’t open onto the back office. You can take your profile out of the directory any time from your portal.
How We Protect It
- Scrambled on the way and at rest. Everything you send us is encrypted as it travels, and our database and file storage are encrypted too. Someone who intercepted it, or walked off with one of our disks, would see gibberish.
- A database with no front door. Your information lives in a database that can’t be reached from the internet at all. Only the PE+Co platform, and a few authorized people doing maintenance through a secured route, can reach it.
- Documents behind a fresh key every time. When you open one of your documents, we first check it’s you, then make a link that stops working after a minute. A saved link goes dead almost at once.
- Your photo, cleaned. Phone photos can carry hidden details, including where they were taken. We strip those out before your headshot is shown anywhere.
- Your information is yours alone. Every request is checked: one member can never see or change another member’s profile, documents or drafts.
- A record of who looked. When PE+Co staff open the portal as you to help, that’s logged, and so is every change to your records.
- Hosted in the United States on Amazon Web Services, the same infrastructure many banks use.
We test these protections with every change, including tests that deliberately try to reach one member’s information from another member’s account.
Signing In
- A fresh code every time. You can sign in with a one-time code we email you, so there’s no password for anyone to guess or steal. You can set a password too, if you’d rather — just use one you don’t use anywhere else.
- Google, if you like. You can also sign in with your Gmail account. Google shares your name, email address and Google account ID with our sign-in service, and we keep only the email and ID. We never get your Gmail, Drive, contacts or calendar.
- Repeated guessing gets slowed down. After a few wrong tries, sign-in makes you wait before trying again.
What we will never ask you for: your sign-in code, your password, or your card number — not by email, phone or text. Payments happen on Stripe’s own secure page, and your card number never reaches us. If someone asks, it isn’t us. Forward it to info@practiceelements.com.
What You Can Do
- Keep your email account safe. Your sign-in codes go there, so turn on two-step verification for it.
- Sign out on shared computers. Use “Sign Out” at the top of the page when you’re done.
- Tell us if something looks off — an email you didn’t expect, a change you didn’t make. Write to info@practiceelements.com.
One Thing We Ask of You
Never put client or patient information on PE+Co — not in your profile, a form, or an uploaded document. PE+Co supports the business side of your practice and isn’t built to hold health information. It’s part of the agreement every member accepts.
If Something Goes Wrong
If we ever find that your information was exposed, we’ll tell you promptly, explain what happened and what we’re doing about it, and tell you anything you should do.