Doxy.me relies on redundant AWS-supported servers located in the United States to support the service. AWS servers are SOC 2 certified, abide by FIPS 140-2 standards, and are maintained in compliance with HIPAA regulations.

However, our servers are meant to provide general services and do not provide the audio/video connection.

Doxy.me servers are used to establish a connection between the provider and the patient. After that, the video calls are peer-to-peer—meaning the audio/video data flows directly between the two individuals on the call, not through doxy.me servers.

Group calls use routing servers to maintain connection quality. Still, the routed data between the parties are always encrypted.

The key point is that all transmitted data are encrypted point-to-point using standards-based technologies. See details in our Security and Privacy Overview

If you have any questions, please contact our support team.