Account and care access
Ambera uses authenticated accounts and shared access controls to determine which records a person can read or change. Care-team relationships, assignment state, and specific grants affect that access. Access checks are not based only on the controls visible on a screen.
Encryption has a defined scope
The current messaging flow encrypts new message content and supported attachments before sending. That is a messaging protection, not a statement that all Ambera information is end-to-end encrypted. Device keys and recipient access affect whether messages can be opened.
Protect your account
Use a unique password, review signed-in sessions, and keep trusted devices protected. Support does not need your password, sign-in codes, encryption keys, or medical records. No online service can promise absolute security.