Built to Protect Athlete Data

Security and privacy are designed into every part of Gameplan, so medical teams can collaborate with confidence.

HIPAA Compliant
GDPR Compliant

Encryption Everywhere

Athlete data is encrypted in transit and at rest, across every device and integration.

Role-Based Access

Practitioners, coaches, athletes and guests see only what their role allows — nothing more.

Full Audit Trail

Every view, edit and export is logged, so you always know who touched what and when.

Secure Infrastructure

Hosted on hardened cloud infrastructure with continuous monitoring and backups.

Private AI

Your data is never used to train public models. AI connections run through our compliant MCP server.

Your Data, Your Control

Export or delete your organisation's data at any time. You own it, always.

Data Privacy

We collect only the data needed to run return-to-play. Medical and performance information stays within your organisation and is shared only with the people you invite.

AI & Integrations

Connections to LLMs and data providers such as VALD and Catapult use scoped, revocable credentials. Model providers cannot retain or train on your data.

Application Security

Code is peer reviewed, dependencies are scanned continuously, and the platform is regularly tested by independent security specialists.

Business Continuity

Automated backups, redundancy and documented incident-response procedures keep your team running when it matters.

Book Discovery Call