Donor and patient records are protected health information. We apply HIPAA aligned controls including encryption, access management, network segmentation, and monitored backups. We restrict access to authorized staff, log activity for audits, and maintain recovery plans so donor data stays private and available.