Built like healthcare software, because it is
Client names, Medicaid status, and dietary needs are Protected Health Information. HiveMarket treats them that way in the architecture — not just in a policy document.
Your agency's data is isolated in the database itself
Every agency is a separate tenant, walled off with Postgres Row-Level Security — enforcement lives in the database, not just the application. Automated tests prove one agency can never read another's rows, and they run against the live database.
Encrypted everywhere
All traffic runs over TLS, and data is encrypted at rest. Delivery-proof photos live in a private bucket — never public, viewed only through short-lived signed links.
An audit trail that can't be edited
Every order, delivery, billing computation, sign-in, and permission change writes to an append-only audit log. No update, no delete — enforced by the database itself. What happened is what's recorded, permanently.
No PHI in email, ever
Notification emails say "a client" and link into the app — never a name together with program or dietary details. The details stay behind sign-in, where they belong.
Least-privilege access
Five distinct roles, each seeing only its own slice: vendors never see client records (orders carry only a delivery label), agencies never see vendor costs, staff permissions are scoped by role. Client shoppers see exactly their own record and nothing else.
Strong sign-in protections
Two-factor authentication (required for platform operators), account lockout after repeated failed attempts, one-tap magic links for client shoppers (no passwords to lose), and full session sign-out everywhere.
HIPAA-ready posture
HiveMarket runs on HIPAA-capable infrastructure (Supabase, Vercel). Business Associate Agreements are executed before any real client data is entered — that's a hard gate in our launch process, not an afterthought.
Forgiving by design, honest by default
Destructive actions confirm first. Records that matter for audit are never hard-deleted — they're deactivated, so the history stays intact.
Questions about compliance?
We're happy to walk your compliance officer through the architecture, the audit trail, and the BAA process before anything is signed.