India
Regional instance with in-region endpoints.
Features · Enterprise
The number is safe to report. The person stays private.
Vantage Fit employee wellness platform data privacy, in specifics: four regional instances, company-scoped isolation, and an HR view that stops at the crowd. Built for the security review your team is about to run.
Four regional instances SAML 2.0 SSO Aggregate-only HR view
Access and authentication, in numbers
Facts panel
- SSO
- SAML 2.0, set up with the integration team
- Lockout
- After 5 failed password attempts
- Password reset
- Single-use links, expire in 1 hour
- Password length
- Min 8 chars on reset, 6 for in-app change
- OTP
- 10-minute validity, configurable per country
- Mobile
- SSL pinning via TrustKit
- Web and admin
- Captcha on non-mobile web and admin sign-in
Four regions. No quiet move later.
Your instance lives in one of four regions, chosen at onboarding, with in-region endpoints. Changing regions after setup requires a migration, so the choice is made once, on the record.
United States
Regional instance with in-region endpoints.
European Union
EU data residency available for European workforces.
UAE
Regional instance with in-region endpoints.
Company-scoped multi-tenant isolation
Every query carries your company ID. Lab and health-risk queries are company-scoped by design, so one tenant's data never surfaces inside another's reports.
One account across the suite
Companies running other Vantage Circle products share the same user, company, and auth layer, so there is one identity boundary to review, not several.
HR sees the crowd, never the person.
The participation number is usable upstairs because individual health never leaves the employee. That boundary is a product rule, not a policy promise.
✓
Aggregates onlyHR sees org and department participation metrics. Never an individual's health profile, HRA answers, or lab values.
×
Count-only health riskTargeting a health-risk cohort returns a number to act on, not a list of people.
✓
Leadership Insights, no PIIAI-generated summaries over aggregated buckets through an internal ML API. Read-only, with no personal data in or out.
Shown in product on health-risk views: "The list of users is not displayed to protect individual privacy."
Offboarding that forgets the person, not the record.
When an employee leaves or asks to be deleted, the person goes and the reporting stays intact.
Hashed, cleared, kept countable
Name and email are hashed, tokens are cleared, and historical activity and transaction records are retained for reporting. Deletion behavior is company-configurable.
A BAA for the lab pipeline only
The platform is HIPAA-guideline aligned. For companies using Health Data Upload, BAA provisions for HIPAA compliance apply to that lab-report pipeline, not to the whole product. See health data upload
Can HR see an individual employee's health data?
No. HR sees aggregate org and department metrics only. Individual health profiles, HRA answers, and lab values are never shown, and health-risk targeting returns a count, not a list of names.
Where is our data hosted?
In one of four regional instances: India, US, EU, or UAE. The region is chosen at onboarding with in-region endpoints, and changing it later requires a migration.
Is Vantage Fit HIPAA compliant?
The platform is HIPAA-guideline aligned. BAA provisions for HIPAA compliance apply specifically to the lab-report pipeline for companies that use Health Data Upload, not to the whole product.
Put us through your security review.
Bring your questionnaire. We will walk through residency, isolation, and the HR data boundary on a live call.
Four regional instances
Company-scoped isolation
Aggregate-only HR view
SAML 2.0 SSO
Trusted by 100+ organizations.