Security & compliance

The Webb Group portal runs on a HIPAA-compliant Google Cloud foundation with controls built to SOC 2 Type II principles. We align with GLBA Safeguards, CCPA/CPRA, and the NIST Cybersecurity Framework 2.0. All file uploads are scanned for malware, encrypted at rest, and only accessible via authenticated MFA-protected sessions; every file view and download is audit-logged.