Keeping Your Account Secure in DigitalCabinet

The data stored in DigitalCabinet is sensitive. It belongs to real people managing real health information, and protecting it is not optional. Authentication is one of the first and most important layers of that protection, and DigitalCabinet is built with clear requirements around how accounts are accessed and verified.

Two-Factor Authentication

All accounts with access to sensitive data in DigitalCabinet are required to use two-factor authentication (2FA). This means that logging in with a password alone is not sufficient. A second verification step is required, which ensures that even if login credentials are compromised, unauthorized access is still blocked. For administrators and anyone handling data at the registry level, multi-factor authentication is a mandatory control, not a setting users can opt out of.

Email Verification

Any time a new account is created or changes are made to an existing account, email verification is required to confirm the action is legitimate. This adds a layer of protection against unauthorized changes to account credentials or settings, and ensures that account modifications are tied back to a verified contact point.

How This Fits Into the Broader Security Picture

Authentication does not operate in isolation. DigitalCabinet's security framework includes role-based access control, which limits what each user can see and do based on their role within the organization. All data is encrypted both at rest and in transit. Access is logged, reviewed, and monitored. Together, these controls mean that getting into an account is only one part of a multi-layered system designed to keep sensitive data protected at every stage.

For registries managing health data under HIPAA or GDPR, these controls are not just good practice. They are part of what DigitalCabinet is designed and contractually committed to uphold on your behalf.