How we handle your data today.
Your wallet holds licenses, certifications, and identity details. This page lists the protections we can point to in our own systems, and it says plainly what we do not claim.
Sign up to see shiftsHow to read this page.
This page is short on purpose. A practice is listed here only if it is built into the website or platform today. If something is not listed, do not assume we do it.
This is a summary, not a contract. The Privacy Policy and Terms of Service are the binding documents.
Protections in place.
What the platform does with your account and your documents.
Encrypted connections
The website and platform are served over HTTPS. Requests made over plain HTTP are redirected to HTTPS.
Passwords are hashed
We do not store your password in readable form. Passwords are hashed with bcrypt before they are saved.
Social Security numbers are encrypted
If you give us your Social Security number, it is encrypted with AES-256 before it is stored in our database. After you enter it, the platform shows only the last four digits.
Uploaded documents are stored privately
Documents you upload are stored in Amazon S3 with server-side encryption. They do not have public web addresses. When a document is opened, the platform creates a link that expires after a short time.
Bank connections are encrypted
You link a bank account for payouts through Plaid. The access token Plaid gives us for that connection is encrypted before it is stored.
Sign-in attempts are limited
The platform limits how many sign-in attempts can be made in a short period, to slow down password guessing.
Service providers.
We use other companies to run parts of the platform. These are the ones built into it today. The Privacy Policy describes how information is shared with service providers.
Amazon Web Services
Stores uploaded documents.
Plaid
Links bank accounts and moves payouts.
Checkr
Runs background checks.
Twilio
Sends text messages, such as verification codes.
Resend
Sends email from the platform.
Anthropic
Provides the AI model used to read uploaded credentialing documents.
Provides Sign in with Google on the platform, and Tag Manager and fonts on the marketing website.
Patient information does not belong here.
Rediworks is a staffing and credentialing tool. It is not a medical records system. The Terms of Service do not allow anyone to upload patient information to the platform. Patient records stay with the facility.
What we do not claim.
We would rather say less than say something we cannot back up.
No certifications
This page does not claim any security certification, compliance attestation, or outside security audit.
No guarantee
No system is perfectly secure, and we do not promise that ours is.
Report a security problem.
If you think you have found a security problem with the website or platform, or you think someone else has accessed your account, email [email protected].
Please include what you saw and how to reproduce it. Do not include other people's personal information in your message.
The binding documents.
If this page and the legal documents disagree, the legal documents control. Last updated October 9, 2026.
See urgent care shifts with the rate on every listing.
Create your account and build your credential wallet when you are ready.