Site Security


How secure is my information when I use My Health at Vanderbilt?
Vanderbilt University Medical Center (VUMC) respects your privacy and is committed to protecting the confidentiality of the information you transmit or view using the My Health at Vanderbilt patient portal. VUMC maintains the following specific security controls to protect information you may transmit or access using My Health at Vanderbilt:

  • Encryption: We use 128-bit Secure Socket Layer (SSL) to encrypt the communication from your Web browser to our secure Web server.
  • Dedicated Web server for My Health at Vanderbilt.com: We separate the Web server and the equipment that houses the electronic health record (EHR). In the unlikely event that the Web server is compromised, no health information would be exposed because it is not stored on the Web server. Patient information is stored only in the EHR, behind a firewall.
  • No caching on the client side: Caching is a feature that helps your computer respond more quickly by storing information you have recently accessed on the computers hard drive. We disable caching of data you access while using My Health at Vanderbilt and force the Web pages to expire immediately. This prevents someone who uses your computer after you have accessed information through My Health at Vanderbilt from viewing pages that you had previously viewed.
  • Firewall: Personal health information is stored in the secure EHR, protected from the Internet by a firewall.
  • Session timeout: After a period of inactivity, your My Health at Vanderbilt session will be automatically terminated.
  • Monitoring: VUMC constantly monitors the Web server for evidence of unauthorized break-in attempts, and applies the most up-to-date security patches as they become available.


VUMC staff members and employees are trained in VUMCs confidentiality policies and the appropriate use of patient information. For more information on how VUMC protects patient information, please see our Notice of Privacy Practices