PRIMR is built on Amazon Web Services cloud computing platform. You can read more about how AWS handles HIPAA compliance here. PRIMR has a Business Associates Agreement (BAA) with AWS. Patient email is Protected Health Information (PHI) and is handled in accordance with HIPAA compliance standards with encryption in transit and at rest in Mongo DB. You can read more about security on Mongo DB here. PRIMR has a BAA with Mongo DB.