COMMCARE SECURITY
Enterprise-Grade Data Security
CommCare delivers enterprise-grade security built for the realities of global social impact programs. Trusted by governments, NGOs, and research institutions worldwide, it meets GDPR, HIPAA, and SOC 2 standards across your choice of secure regions, ensuring program data remains secure and compliant in even the most complex environments.
Our Security Foundation
As the first and only SOC 2–certified Global Good software platform, CommCare undergoes independent audits to meet the highest global standards. We safeguard sensitive information wherever you work, ensuring compliance with evolving regional laws.
Security at Every Stage. From Collection to Sharing.
Secure Collection
Role-based permissions and encryption protect data from the moment it’s collected.
Advanced Authentication
Multi-factor authentication (MFA) and single sign-on (SSO) keep accounts secure.
Secure Workflow Automation
Automates data routing and decisions to limit data exposure from unnecessary manual handling.
Controlled Sharing
Data is securely shared through authenticated APIs, and controlled by group- and location-based access policies.
SOC 2–compliant cloud hosting with high availability and automated backups.
Comprehensive Audit Logging
HIPAA-compliant auditing for all covered entities.
Data Security Best Practices in Action
How do you protect sensitive data at scale, in low-resource settings, and under real-world constraints? In this expert walkthrough, Dimagi’s CTO, Clayton Sims, and Director of Technology, Kai Cowger, share practical lessons from over a decade of building and scaling secure digital systems for social impact.
Ready to protect your data with a platform you can trust? Let’s get started.
Explore
Data Management & Security Playbook
Download our step-by-step guide to build secure data strategies across three maturity levels, with actionable frameworks for social impact organizations worldwide.
Dimagi Trust Center
Visit the Dimagi Trust Center to learn about our security posture and request access to SOC 2 reports, security architecture diagrams, and compliance documentation.
Secure Digital Systems at National Scale
Explore how CommCare’s security features enabled large-scale COVID-19 contact tracing across New York State’s 57 counties in this peer-reviewed research.