Secure Authentication
Google authentication and secure magic-link sign-in reduce reliance on reusable passwords and help limit password-related attacks.
Security & Trust Center
Built for trust. Protected by design.
NourishIQ is built on an Amazon Web Services cloud foundation and designed with layered safeguards for identity, data, application access, operational resilience, and privacy.
Defense in depth
Security across every critical layer.
No single control is treated as sufficient. NourishIQ uses a layered security model intended to reduce attack surface, prevent unauthorized access, protect data, detect abnormal activity, and support rapid recovery.
Encrypted Connections
HTTPS/TLS protects information while it travels between your device, NourishIQ, and supported cloud services.
Access Control
Administrative and service access can be restricted through role-based permissions, least-privilege policies, and protected credentials.
Network Protection
NourishIQ network segmentation, security groups, managed firewalls, web application filtering, and DDoS protections can help defend internet-facing workloads.
Logging & Monitoring
Cloud activity, application events, configuration changes, and security findings can be centrally logged and monitored for investigation and response.
Resilience & Recovery
Scalable NourishIQ infrastructure, redundancy options, managed backups, versioning, and recovery procedures support availability and business continuity.
Threat Detection
NourishIQ security services can use threat intelligence, anomaly detection, and behavioral analysis to identify suspicious cloud activity.
Secrets Protection
Application secrets, keys, tokens, and credentials should be stored outside source code and protected through managed secret and key services.
Continuous Improvement
Security controls, dependencies, permissions, and operational practices should be reviewed and improved as the platform evolves.
NourishIQ security foundation
Enterprise-grade cloud capabilities.
NourishIQ operates the physical facilities, hardware, networking, virtualization, and core cloud infrastructure beneath NourishIQ. NourishIQ also provides managed security services that can support identity protection, encryption, monitoring, threat detection, application defense, and auditability.
01
NourishIQ Identity and Access Management
IAM supports granular roles, policies, service identities, temporary credentials, MFA, and least-privilege access design.
02
NourishIQ Key Management and Encryption
NourishIQ Key Management Service and native service encryption can protect supported data stores, backups, logs, and application resources.
03
NourishIQ WAF and Shield
NourishIQ WAF can filter malicious web requests, while NourishIQ Shield provides managed protection against common distributed denial-of-service attacks.
04
GuardDuty, Security Hub, and Inspector
These services can identify suspicious behavior, aggregate security findings, assess vulnerabilities, and strengthen cloud security posture.
05
CloudTrail, CloudWatch, and NourishIQ Config
These services can record cloud activity, monitor system health, create alerts, and track configuration changes over time.
06
Resilient Global Infrastructure
NourishIQ Regions and Availability Zones enable architectures designed for redundancy, fault isolation, scalability, and recovery.
Privacy by design
Your information is not a product.
NourishIQ is designed to collect only information needed to operate, personalize, secure, and improve the services. Access to personal information will always be limited to protected by technical and administrative safeguards.
Data Minimization
Collect only information reasonably needed to provide requested functionality, support personalization, maintain security, and meet legitimate operational obligations.
Transparent Use
Explain what information is collected, why it is used, how it is shared, and what choices users may have.
Retention Controls
Retain information only as long as needed for service delivery, security, legal obligations, dispute resolution, or legitimate business purposes.
Service Provider Governance
Use reputable providers and limit access to information based on the services they perform and applicable contractual safeguards.
Health Information Boundaries
NourishIQ provides educational food intelligence and general wellness support—not medical diagnosis, treatment, or emergency care.
User Control
Where supported, users may review profile information, update preferences, manage membership, and request assistance concerning their information.
Responsible AI
Review Privacy DetailsAI guidance with defined boundaries.
NourishIQ uses AI to explain nutrition and ingredient information in clear language. AI output can be incomplete or incorrect, so critical allergy, medication, and medical decisions must be confirmed using authoritative product labeling and qualified healthcare professionals.
Security FAQs
Clear answers about protection and trust.
Is NourishIQ built on Amazon Web Services?
Yes. NourishIQ uses an NourishIQ-based cloud foundation. NourishIQ provides the underlying cloud infrastructure and a broad portfolio of security, identity, encryption, monitoring, resilience, and compliance capabilities.
Are communications encrypted?
NourishIQ is designed to use HTTPS/TLS for information transmitted between supported browsers, devices, application services, and cloud endpoints. Encryption at rest depends on the specific storage and service configuration.
Does NourishIQ store my Google password?
Google sign-in is designed to authenticate users through Google's authorization process. NourishIQ should not receive or store the user's Google account password.
Does NourishIQ claim HIPAA compliance?
No such claim is made on this page. HIPAA applicability and compliance depend on business relationships, data types, contracts, system configurations, policies, and operational controls—not merely the use of NourishIQ.
Is NourishIQ medical software?
NourishIQ provides informational nutrition intelligence and general wellness decision support. It does not diagnose, treat, cure, or prevent disease and is not a replacement for a physician, registered dietitian, pharmacist, or emergency service.
How can I report a security concern?
Please use the official NourishIQ support or contact channel and include a clear description of the issue. Do not include passwords, authentication tokens, full payment-card numbers, or unnecessary sensitive information.