Elera publishes its security program, controls, service providers, and policies so healthcare organizations can evaluate how we protect patient and referral data.
Supabase
Database, authentication, file storage
Vercel
Web application hosting
Fly.io
Workflow worker hosting
Temporal
Workflow orchestration
Compliance · October 20, 2026
Every pull request to Elera's code is now scanned for security vulnerabilities with Semgrep Community Edition, which flags any new finding the change introduces, and the main branch is scanned in full on every change. The scan runs in Elera's own build pipeline; no code or findings are sent to Semgrep. The Security & Compliance Overview is updated to version 1.3.
Compliance · October 19, 2026
Patient data that Elera's workflows carry between steps is now encrypted with Elera's own key before it reaches the workflow platform, which stores it only as ciphertext. The Security & Compliance Overview is updated to version 1.2.
Compliance · October 19, 2026
Pushes containing credentials are now blocked before they reach Elera's code repository. The Security & Compliance Overview is updated to version 1.1.
Compliance · October 19, 2026
The Security & Compliance Overview and Elera's incident response and activity review procedures are now published under Documents, each with an identifier and version history. Control statuses on this page now match the overview.
Compliance · August 2, 2026
Elera refreshed the published status of its security controls and current program improvements.
