Security & Compliance

Every user operates inside a scoped view: FMO administrators see the whole operation, agencies see their own hierarchy, and producers see only their own book. That boundary is enforced on the server for every screen, report, and export — not just hidden in the menu.

Granular permission controls let administrators govern which roles can see and use each feature of the platform.

Beneficiary identifiers (Medicare numbers, SSNs, dates of birth) are masked by default across the platform. Unmasking requires an explicit, per-user unlock — and every access to protected information is recorded.

Data exports inherit the same masking and scoping rules as the screens they come from.

Imperium keeps a tamper-evident record of actions across the platform — logins, changes, compliance case activity, and sensitive-data access. The record is designed so history cannot be quietly rewritten, which is exactly what carrier and CMS scrutiny expects.

Accounts support modern, phishing-resistant sign-in with passkeys, alongside password sign-in with two-factor authentication. Session security and account controls are managed per user.

Imperium runs on enterprise cloud infrastructure with encryption in transit (TLS) and at rest. Environments are backed up, monitored, and kept current.

Uploaded documents and records live in managed cloud storage — never on someone’s laptop.

For enterprise and white-label customers, Imperium offers dedicated, isolated deployments — your organization’s data lives in its own environment, physically separated from anyone else’s.

Our demo environment is fully isolated and contains only synthetic data. Nothing real is ever shown in a demo.

Complaints, CTMs, and marketing reviews are managed as tracked cases with deadlines, ownership, evidence, and history — so your compliance posture is demonstrable, not anecdotal.

Imperium is designed with HIPAA-aligned safeguards: role-based access controls, PHI masking, audit logging, and least-privilege data visibility. Where Imperium handles PHI on behalf of a covered entity or business associate, we support the appropriate agreements and controls.

The carrier launchpad links you directly to each carrier’s own portal to sign in yourself. Imperium never stores, proxies, or captures your carrier portal credentials.