Compliance & Security
This page summarises how SideGiggss handles the compliance obligations that matter to facilities and clinicians, and where each item stands ahead of the first pilot. Items marked “in progress” are owned by SideGiggss leadership and will be complete before any paid shift is worked.
| Area | How we handle it | Status |
|---|---|---|
| Business Associate Agreement | Signed with any facility before protected health information is shared. The Service is designed to operate without PHI. | Template pending counsel review |
| Credential verification | License and certification documents are uploaded by the clinician, checked against the state board (manual lookup today, Nursys integration when contracted) and marked verified by a facility manager before offers are honored. | Live in the app |
| Credential expiry monitoring | Daily job reminds clinicians 30, 14, 7 and 1 days before expiry, marks expired documents and removes expired licenses from matching. | Live in the app |
| Background checks | Status recorded per clinician; third-party screening vendor to be contracted before paid shifts. | Vendor selection in progress |
| Professional and general liability insurance | SideGiggss will carry professional liability coverage for marketplace clinicians and general liability for the platform. Certificates provided to pilot facilities on request. | Being placed by SideGiggss leadership |
| Staffing agency licensing | Florida registration and any required nurse-registry licensing are being completed before the first paid marketplace shift. | In progress |
| Payroll, tax and 1099 reporting | Payouts and tax forms are processed through Stripe Connect. | Live in sandbox; production keys at launch |
| Data security | TLS everywhere, encryption at rest, field-level encryption of phone and license numbers, role-based access, audit log of every action, US-hosted Postgres with point-in-time restore, payment data held only by Stripe. | Live in the app |
| Security questionnaire | Standard responses (HECVAT-lite / SIG-lite style) available to facility IT on request. | Pack in preparation |
Requesting documents
Pilot facilities can request the security overview, a BAA, insurance certificates and the questionnaire pack at hello@sidegiggs.app. Please allow five business days.
Reporting a security issue
Email hello@sidegiggs.app with “SECURITY” in the subject. We acknowledge within two business days and do not pursue good-faith researchers.