AXON ADHD Trust Center
AXON Digital Health & Diagnosis is a HIPAA-compliant platform for ADHD assessment and care. All Protected Health Information is processed and stored exclusively on U.S. AWS infrastructure, under security controls aligned with HIPAA, HITECH, SOC 2 and GDPR.
- HIPAA AssessedCompleted Sept 2026
- Penetration TestedOWASP Top 10 & ASVS
- SOC 2 Type IIIn progress
Independently verified, not just promised
Third-party assessments of the AXON platform, tracked in our Scrut Trust Center. Full reports are available on request.
HIPAA Compliance Assessment
Independent assessment of the AXON platform: telehealth services, patient portal, FDA-cleared ADHD diagnostic tools (QbCheck), patient communication scheduling and clinical data management.
Vulnerability Assessment & Penetration Test
Independent VAPT of our telehealth and patient portal platform against the OWASP Top 10 and OWASP ASVS benchmarks, using industry-standard penetration testing methodology.
SOC 2 Type II
Our security controls are aligned with the SOC 2 framework, and our Type II attestation is currently in progress. We update this page and our Trust Vault as it advances.
Security and privacy controls aligned with
- HIPAA
- HITECH Act
- SOC 2
- GDPR
- CCPA
How we protect patient information
Enterprise-grade controls built around the HIPAA Security Rule’s administrative, technical and physical safeguards.
U.S.-Only Data Residency
All PHI is processed and stored exclusively within U.S. Amazon Web Services infrastructure.
Data Protection
Safeguards that protect patient data in transit and at rest, in line with HIPAA and HITECH requirements.
Access Controls
Access to PHI is limited to authorized people with a legitimate need, following the minimum-necessary principle.
Monitoring & Audit Controls
Activity on systems that handle PHI is monitored and reviewed as part of our compliance program.
Independent Security Testing
Our platform has undergone an independent vulnerability assessment and penetration test against OWASP standards.
Secure Telehealth
Evaluations are delivered through HIPAA-compliant secure video and a protected patient portal.
Built for healthcare from day one
AXON is a healthcare platform, so HIPAA is not an add-on: it shapes how we build, host and operate every part of the service.
- Independent HIPAA compliance assessment completed in September 2026
- Covers telehealth, patient portal, QbCheck diagnostics, scheduling and clinical data
- PHI processed and stored only within the United States
- Privacy practices aligned with GDPR and CCPA
- Operated by
- Dodini Behavioral Health, P.L.L.C.
- Hosting
- U.S. AWS
- Assessed by
- Aegisra Assurance LLP
- Pen test by
- Scrut
Your PHI stays in the United States
AXON is operated by Dodini Behavioral Health, P.L.L.C. Protected Health Information is handled under controls aligned with HIPAA, the HITECH Act, SOC 2 and GDPR, and never leaves U.S. AWS infrastructure.
Review the evidence
Full reports are available in our Trust Vault to verified requesters.
HIPAA Compliance Report 2026
Independent assessment by Aegisra Assurance LLP, completed September 2026.
Request accessWeb Application Security Report
Vulnerability assessment and penetration test against OWASP Top 10 and ASVS, completed September 2026.
Request accessMonitored continuously with Scrut Automation.
Frequently Asked Questions
Straight answers about how AXON protects your data, what has been independently verified, and how to get the reports.
Reviewing AXON for your organization?
Our team can walk you through our security program and answer your due-diligence questions.
Contact our teamWhere is patient data stored?
Is AXON HIPAA compliant?
Do you have a SOC 2 report?
Has the platform been penetration tested?
How can I get the full reports?
Who operates AXON?
How do I report a security or privacy concern?
Care you can trust, privacy you can verify
Start with a clinician-led ADHD evaluation, or explore our full Trust Vault and request the reports your team needs.