From medical histories to payment details, camps collect large amounts of sensitive information each year — and the software they use to manage it plays a huge role in protecting it.

As a leading camp management software provider trusted by more than 1,250 camps and youth programs, CampDoc takes that responsibility seriously. Learn how we approach security and privacy so you can rest assured your campers’ information is safe with us.

We’re guided by the principles of the SOC 2 computing standards. SOC 2 includes five Trust Services Criteria: Security, Confidentiality, Privacy, Availability, and Processing Integrity.

An organization can call itself “SOC 2 Compliant” by demonstrating only Security, but all five principles apply to our business, so our auditors hold us accountable for all five. This means our data is strictly protected from unauthorized access, kept intact and accurate throughout its lifecycle, and supported by robust infrastructure to ensure availability whenever it’s needed.

Absolutely. While we don’t force our clients to require MFA from their users, admins can require it for every user in their organization and we strongly encourage them to do so. We also require our own staff to use MFA for access to all critical infrastructure used to support CampDoc.

Yes. We recently added the ability for organizations to authenticate their users into CampDoc using their own institution’s identity provider via the SAML standard. For organizations not using a SAML-compliant identity solution, we offer a custom API-driven solution. Our support for SSO eases offboarding for our clients, minimizing the risk that a forgotten credential will remain active.

Yes. We’re audited annually for compliance with all five SOC 2 Trust Services Criteria by Sensiba, LLC. We also use the Drata service to maintain continuously monitored compliance. That continuous monitoring ensures that compliance with all controls remains at the forefront of our planning and execution. Clients can see both our auditors’ reports and the policy documents underlying our compliance by visiting our Trust Center at trust.docnetwork.org.

Yes. Sensiba also audits our HIPAA compliance. We maintain Business Associate Agreements with all Protected Health Information subprocessors. Clients wishing to engage a Business Associate Agreement with CampDoc can reach out to their Client Success Manager to start the process. You can view our latest HIPAA compliance report in our Trust Center.

Additionally, we safeguard protected health information with role-based access. Within CampDoc, admins decide which staff roles can view health records, and every record view is logged so you can also see who opened what and when.

Yes, in fact, our longtime partnership with the American Camp Association informs ACA standards. Our founder and CEO, Dr. Michael Ambrose, advises the camp industry on best practices for keeping campers healthy, and our software reflects those high standards.

We maintain an ever-growing list of integration partners including ACTIVENet, Daxko, Tessitura, and Amilia, to name a few. We understand that running a great camp requires administrators to solve many different problems, in some cases using different software platforms. Our API enables secure data transmission between platforms to eliminate manual data synchronization.

For more information about CampDoc’s security and privacy protocols, read our quick guide or contact sales@campdoc.com.