Last updated September 15, 2026
How we protect your information
This page describes the technical and organizational safeguards Persephone Nutrition Sciences LLC uses to protect data within Nutrition Compass, our clinical nutrition workspace, and the persephone-nutrition.com website, including the contact form on this site.
If you are a client of Persephone Nutrition and use our Patient Portal to message your dietitian, schedule appointments, or complete intake forms, that portal is hosted by a separate vendor, Practice Better, under their own security program. See Practice Better’s Privacy Policy and Security FAQ for details on that system.
Encryption in Transit & At Rest
All traffic between your browser and Nutrition Compass is encrypted with TLS. Our application enforces HTTPS for every request and uses HTTP Strict Transport Security (HSTS) to instruct browsers to always connect securely, and connections between the application and its database are likewise configured to require TLS encryption.
Client data stored in our Azure SQL database is encrypted at rest using Transparent Data Encryption (TDE), which Microsoft applies automatically to every Azure SQL database.
Hosting Infrastructure
Nutrition Compass runs on Microsoft Azure, using Azure App Service to host the application and Azure SQL Database to store client and account data. Azure’s underlying infrastructure maintains independent third-party audits and certifications, including SOC 2 and ISO 27001, covering the datacenters our application runs in.
We do not operate our own physical servers; hosting, network security, and datacenter access controls are managed by Microsoft as part of the Azure platform.
Account Access & Authentication
Sign-in is handled by Azure App Service Authentication at the platform level before requests ever reach our application code. Once signed in, every action you take is checked against authorization rules that are re-evaluated from your account record, so access changes (for example, a role change or account deactivation) take effect without requiring you to sign out.
We follow the principle of least privilege internally: administrative access to production systems is limited to the team members who need it to operate the service.
Application-Level Protections
- Anti-forgery tokens on all forms and interactive components to prevent cross-site request forgery.
- Rate limiting on public-facing endpoints, such as this site’s contact form, to reduce automated abuse.
- Generic, non-revealing error pages in production so unexpected errors don’t expose internal system details.
- Structured logging of application activity to support troubleshooting and security review, without logging sensitive form fields such as passwords or payment details.
Payment Processing
Subscription payments for Nutrition Compass are processed by Stripe, a PCI DSS Level 1 certified payment processor. Card numbers and other payment details are sent directly to Stripe and are never transmitted to or stored on our own servers. Payment events (such as a successful charge or a subscription renewal) are delivered to our application through Stripe webhooks, which we verify using Stripe’s signing secret to confirm they genuinely came from Stripe.
Backups & Business Continuity
Our production database is automatically backed up on a regular schedule by Azure SQL Database, with point-in-time restore available to recover from accidental data loss or corruption. Backup infrastructure and storage are managed by Microsoft as part of the Azure SQL Database service.
Data Retention & Your Choices
We retain client and account data for as long as your account is active and as needed to provide Nutrition Compass. If you would like your data corrected, exported, or deleted, contact us at info@persephone-nutrition.com and we will work with you to fulfill your request, subject to any records we are legally required to retain. Data removed from our active systems may persist for a limited time in routine database backups until those backups are rotated out in the normal course of business.
Third-Party Service Providers
We rely on a small number of service providers to operate Nutrition Compass and this website:
- Microsoft Azure — application hosting, database hosting, and (where enabled) transactional email delivery.
- Stripe — subscription billing and payment processing.
These providers only receive the information necessary to perform their function on our behalf.
Reporting a Security Concern
If you believe you’ve found a security vulnerability in Nutrition Compass or this website, please email info@persephone-nutrition.com with details so we can investigate. In the event we confirm a data security incident affecting your information, we will notify affected users as soon as reasonably possible and in accordance with applicable law.
Changes to This Policy
We may update this page as our practices or infrastructure evolve. Material changes will be reflected by an updated “Last updated” date at the top of this page.