Skip to content
ARXOVA Trust Center

Security updates

What has changed

Announcements about Arxova's security, privacy and compliance posture, newest first.

  1. October 21, 2026: Arxova signed the CARIN Code of Conduct

    HealthKey Labs, LLC, the company behind Arxova, has signed the CARIN Alliance Code of Conduct for consumer-facing health apps. The Code is a public set of commitments: tell people clearly how their health data is collected, used, and shared, get their opt-in consent and let them withdraw it, give them access to their data and a way to delete it, protect it with strong security, and name an executive who is accountable for keeping these promises. This is a self-attestation, not a certification, and it isn't an endorsement by the CARIN Alliance. We're publishing it so you can hold us to it. You can read the Code here: https://www.carinalliance.com/code-of-conduct

  2. September 26, 2026 — Trust center published

    Launched this trust center covering our compliance posture, subprocessors, and security controls.

  3. September 26, 2026 — Reduced third-party tracking on the marketing website

    Removed three analytics and advertising trackers and one SEO script from arxova.health. The site now uses a single product analytics tool, loaded only after a visitor grants consent and never on pages the mobile app opens in its own window.

  4. September 23, 2026 — SOC 2 Type 1 report issued

    Received our SOC 2 Type 1 report covering the Security trust services criteria, examined by an independent licensed CPA firm.

  5. Approved for the CMS Health Tech Ecosystem

    Arxova (HealthKey Labs LLC) was approved as a participant in the CMS Health Tech Ecosystem, in the Conversational AI Assistants and Kill the Clipboard categories under Patient Facing Apps. Participation is not a CMS endorsement.