Security & data
How Momentum protects your scheduling data
IT, compliance and privacy teams ask precise questions. These are our answers; the details are reviewed with your team during scoping.
Who does what
Your organization decides how the scheduling data of its teams is used. BioSked processes that data on your behalf, under the contract and its data protection terms. Customers in North America contract with BioSked, Inc.; customers in Europe and Switzerland with Bio-Optronics Sàrl, Nyon, Switzerland.
Hosted in your region
Momentum runs on Google Cloud. Production data is hosted in the United States for customers in North America, and in the European Union for customers in Europe and Switzerland.
Scheduling data, not patient records
Momentum processes what it takes to schedule teams: work-related staff details, assignments, call, requests, counters and hours worked. It is not a clinical system and does not store patient records.
Encryption and access rights
Traffic between users and the platform is encrypted (TLS), and data is encrypted at rest. Access rights are set by role and permission, and your own administrators decide who can see and change which schedule.
Traceable, without monitoring people
Time-off, swap and preference requests are recorded in the application and stay traceable. Momentum gives no individual scores and infers nothing about behavior or health; its counters serve the fair distribution of shifts and are visible to the teams themselves.
Questionnaires and agreements
Security questionnaires and data protection terms are reviewed with your IT and compliance teams during scoping.
Questions about security, data protection terms or subprocessors: info@biosked.com