Built for trust.
Designed for peace of mind.
MyVitals is built on the same cloud infrastructure used by the world's leading healthcare organizations — with encryption, access controls, and audit logging designed to keep your most sensitive data safe.
How we protect your data
Every layer of MyVitals is designed with security as a first principle — not an afterthought.
AES-256 Encryption at Rest
Every file you upload is encrypted using AES-256 before it touches disk. This is the same standard used by financial institutions and government agencies worldwide.
TLS 1.3 in Transit
All data moving between your browser and our servers is protected by TLS 1.3 — the most current and secure transport protocol available.
Azure Geo-Redundant Storage
Your records are stored in Microsoft Azure Blob Storage with geo-redundancy. Multiple copies exist across geographically separated data centers, so your data is never at risk from a single point of failure.
HIPAA-Aware Design
MyVitals is built with HIPAA principles at its core — minimum necessary access, audit trails, and strict data handling policies. We do not sell, share, or monetize your health information.
Multi-Factor Authentication
Protect your account with TOTP-based two-factor authentication. Even if your password is compromised, your records remain locked behind a second factor only you control.
Granular Access Controls
Provider access is scoped to a single patient folder and issued as a time-limited, cryptographically random 96-character token. You grant it, you revoke it — no one else can.
Audit Logging
Every access event — uploads, downloads, provider link generation, and revocations — is logged with a timestamp and user identity. You always know who touched your records and when.
Automatic Token Expiry
Provider access links expire automatically. There are no permanent credentials floating around. Regenerate a fresh link any time you need to re-grant access.
No Data Selling. Ever.
Your health data is yours. MyVitals does not sell, license, or share your records with advertisers, data brokers, or third parties. Full stop.
Your data is never for sale
MyVitals is built with HIPAA principles at its core. We apply minimum necessary access policies, maintain strict data handling procedures, and enforce role-based access controls throughout the platform.
We do not sell your health data. We do not share it with advertisers. We do not use it to train AI models. Your records exist solely to serve you.
Ready to take control of your health records?
Start for free. No credit card required.
Simple, transparent pricing
Start free. Upgrade when you need more.
For individuals & families
Free
Get started with secure record storage at no cost.
- 1 patient profile
- Up to 5 file uploads
- Category tagging
- 256-bit encryption
- Download anytime
Single Patient
Perfect for individuals managing their own health records.
- 1 patient profile
- Unlimited file uploads
- Azure Blob Storage
- Global access
- 256-bit encryption
- Download anytime
Family Plan
Manage records for your whole family — 3 or more patients.
- 3+ patient profiles
- Unlimited file uploads
- Azure Blob Storage
- Global access
- 256-bit encryption
- Priority support
For healthcare professionals & organizations
Provider
For independent physicians and small practices managing patient records.
- Up to 50 patient folders
- Provider folder access links
- Prescription management
- Unlimited file uploads
- Azure Blob Storage
- Priority support
Hospital Enterprise
Full-scale deployment for hospitals, health systems, and large clinics.
- Unlimited patient folders
- Multi-provider access control
- Prescription management
- Dedicated Azure container
- SLA & compliance reporting
- Dedicated account manager