Security

A line is personal enough. We keep the record small on purpose.

QueueCode stores what a clerk needs to run a fair counter — not a second copy of a medical chart, and not a marketing list.

This page does not claim SOC 2, ISO 27001, or HIPAA certification. If your counsel needs a current report or a BAA discussion, ask in the demo. We will send what we actually have.

What we store

Display name or ticket label, mobile number, location, optional appointment or order identifier, check-in and presence events, and staff actions. We do not store diagnoses, lab results, payment cards, or government ID images.

Clinic customers

Check-in and queue only. Do not paste clinical notes into staff comments. QueueCode is not an EHR and is not sold as one.

Access

Clerk, lead, and admin roles. Network adds SSO. Sessions time out. Presence is an explicit “I’m here,” never a background location feed.

Transport and retention

TLS in transit. Encryption at rest. Default ticket history is 90 days; Network can set another period to match a records schedule.

Consent

Visitors opt in by texting the posted number. HELP and STOP are honored. We keep a suppression record so a STOP stays stopped.

Incidents

[email protected]. We notify the location’s admin when visitor personal data is involved, on the timeline in your order form.

Request the security note →