mavenUnderstand what you share with Maven.
Use Maven for non-sensitive project coordination. Do not send protected health information or other regulated data to Maven. Contact us for current security information before using Maven for sensitive projects. Do not submit credentials or confidential client material.
We do not represent Maven as HIPAA compliant or approved for regulated workloads. Encryption coverage, access logging, retention, and deletion behavior have not been verified end to end.
What this page does not guarantee.
Encryption. We cannot currently substantiate a blanket claim that all project content is encrypted at the application layer or that plaintext never reaches storage. Do not rely on that claim when choosing what to send.
Access logging. We have not verified that every sensitive-data read is recorded or that all audit records are immutable. Existing logging must not be treated as complete compliance evidence.
Retention and deletion. We have not verified uniform retention periods or complete deletion across application records, backups, email providers, and other connected services. Closing an account must not be assumed to remove every copy immediately.
Regulated use. This page does not establish a Business Associate Agreement, a certification, or permission to submit regulated information. Such use requires a separate review of the applicable contracts and actual technical controls before any data is shared.
Implementation is not certification.
The presence of encryption utilities, audit tables, retention settings, or consent records in the code does not prove that every production data path uses them. A complete review must establish which protections are active and where gaps remain.
Until that review is complete, keep project details non-sensitive and do not send regulated data.
Have a security question?
Email a description of your requirements without including sensitive information. Do not send regulated data for evaluation.