Plain answers to the questions practice managers ask us. If you'd like more detail on any of these, ask. We're happy to walk through it.
All traffic between your browser and VitalScheduler uses HTTPS, the same encryption banks use. The app and its database run on Render, a managed cloud host, whose database service keeps recent backups so data can be restored to an earlier point.
Every group's information lives behind server-side checks that run on every single request: your schedulers and providers can only ever see your group. We check this isolation with automated tests that we run before updates.
We keep only a one-way cryptographic hash, so nobody, including us, can read a password back. Sign-in is protected against password-guessing attacks, and sessions use secure, browser-protected cookies.
Billing is handled entirely by Stripe, the payment processor used by Amazon, Google, and much of the internet (PCI DSS Level 1 certified). Card numbers go directly to Stripe. VitalScheduler never sees or stores them.
VitalScheduler stores work schedules: who covers which rotation on which day. The system has no place for patient information, and our terms prohibit entering it, so your group's clinical-data obligations stay with your EHR, where they belong.
Each provider's personal calendar link uses a long, unguessable address and shows only that provider's published shifts and approved time off. If a link is ever shared by mistake, we replace it on request.
The AI assistant runs only when a scheduler asks it to help with setup, and it sees only what that task needs: the rotation description or pasted provider list, provider names and groups, and your rotation setup. It never sees your schedules. We turn AI features off for any group on request.
We count visits to our public pages, like this one, with Google Analytics. It never runs on the sign-in page, on our Terms and Privacy pages, or anywhere inside the app. We never sell your data or use it to train AI models.
Export your schedules to Excel or PDF at any time. If you leave, an administrator can delete your group's data from the Billing page, or we delete it on request. No lock-in.
Questions about any of this? Email us. A human, the founder, answers.
VitalScheduler is made by Viereck Group LLC, a Pennsylvania company.