Access protections
Each person sees and changes only what their role allows.
Sign-in limited to current employees
Only people on the agency’s active employee list can sign in to the employee side of ApolloEMS. Having an account with a sign-in provider is not enough, and a person removed from the active list loses access.
Every request requires a login
The behind-the-scenes requests that read or change data refuse anyone who is not signed in. There is no unauthenticated way in.
Access rules enforced by the database
Who can see and change what is enforced by the database itself, not only by the screens. Employees can see and change only their own timecards, requests, punches and pay-related records. Only supervisors can change schedules, employee records, announcements, fleet, inventory, payroll and system settings.
Payroll privacy
Employees see only their own payroll information. Supervisors finalize and lock each pay period before it goes to payroll.
Automatic sign-out
Office, schedule, supervisor, admin and ePCR pages sign a person out after 15 minutes without activity, with a warning one minute before. The MDT and Dispatch board stay signed in so crews and dispatchers are not interrupted.
Private source code
The ApolloEMS source code is kept in a private repository and is not publicly visible.
Hosting
ApolloEMS runs on established cloud infrastructure, with the database hosted in the United States. Connections to ApolloEMS use encrypted HTTPS.
Text messages
Employees receive texts only after opting in, and can opt out at any time. See the SMS Privacy, SMS Terms and SMS Opt-In Process pages.
Problem reports
The Report an Issue button can attach a screenshot to help support. On patient-chart pages the screenshot is off by default.
Activity records
Key changes, such as completed shift trades, schedule-change notifications and ePCR access changes, are recorded.
Patient information
Apollo ePCR is a training-only beta.
The Apollo ePCR beta is used for EMS education and simulated patient care documentation. It is not released for operational patient care and must not contain real patient information. Clinical security and HIPAA requirements are being evaluated as part of developing ePCR for operational use.
Have a security question?
We are happy to walk through how ApolloEMS would protect your agency’s information. Email support@apolloems.org or request a demo.