Epic Website Privacy Policy

Epic MyChart · agreement dated March 23, 2026 · Official agreement

Read the agreement

3 of 33 cards in Security & Safeguards

Security & Safeguards · Company practice

Epic uses strictly necessary cookies for security and load balancing

Epic uses strictly necessary cookies on its websites to prevent unauthorized access to or misuse of its systems, to prevent cybersecurity incidents, and to keep visitors on the same server they first connected to when they move between its websites, which the policy describes as load balancing.

Supporting quotations

We use strictly necessary cookies on Our Websites to prevent unauthorized access to or misuse of our systems, prevent cybersecurity incidents, and to keep website visitors on the same server they initially connect to when they navigate to one of our websites

Qualifications & exceptions

  • Described as strictly necessary cookies, with the purposes listed.

Not stated here

  • The paragraph does not say whether visitors can decline these cookies.

Security & Safeguards · Company commitment

Epic uses process, technology and physical controls, encrypts website submissions and limits staff access

Epic says it uses a combination of process, technology and physical security controls to protect the privacy, security, integrity and availability of your personal information. Information you submit through its websites is encrypted and transmitted securely, which you can check by looking for a closed lock icon or 'https' in the address. Epic also keeps internal policies that limit access to your information to staff and contractors who need to know it to perform their jobs and to develop or improve its websites, products and services.

Supporting quotations

How We Protect Your Personal Information
We use a combination of process, technology and physical security controls to protect the privacy, security, integrity, and availability of your personal information.
When you submit your information through Our Websites, that information is encrypted and transmitted to us in a secure way.
We maintain internal policies and processes that limit access to your information our staff and contractors who need to know the information to perform their jobs and develop or improve our websites, products, and services.

Qualifications & exceptions

  • Access is limited to staff and contractors with a need to know, which includes developing or improving websites, products and services.
  • The encryption statement covers information submitted through Epic's websites.

Not stated here

  • The specific controls and standards used are not described.

Security & Safeguards · Context

Security and vulnerability-reporting headings have no text in the saved copy

The saved text ends with a 'Security' heading and a 'Report a Potential Security Vulnerability or Concern' heading. No instructions or contact details appear beneath either heading in this saved copy, so this document does not say here how to report a vulnerability.

Supporting quotations

Security
Report a Potential Security Vulnerability or Concern

Qualifications & exceptions

  • Only the headings are present in the saved text.

Not stated here

  • How to report a security vulnerability or concern is not stated in the saved text.