Cybersecurity

Movano’s Commitment to Ring and Mobile Application Security

• At Movano, we are dedicated to data privacy and security. We are committed to safeguarding your data.

What Happens to Your Data

• All your data is backed up to our cloud using TLS 1.2 or higher encryption standards during transmission.
• We utilize AWS as our primary cloud infrastructure provider, and all databases are encrypted at rest using AES256 encryption by default.

Security Measures

Data Sharing

• Your data is only accessible within our company on a need-to-know basis. We do not share your data with any external vendors.

Ring and Mobile Application Security

• Movano EvieMED Rings feature cryptographically signed firmware that ensure only Movano-approved firmware can be installed on the Ring.  We also engage external cybersecurity consultants to perform penetration testing on the Ring and the Mobile Application.

Internal Device Management

• We collaborate with an external consulting firm to ensure all internal devices (laptops, desktops, etc.) meet minimum security requirements, such as password rotation and screen locks.

Cloud Security

• Movano continuously monitors and scans our cloud infrastructure for potential threats, gaps, and vulnerabilities. We also partner with external cybersecurity consultants to perform penetration testing on our cloud systems.

Compliance

• Movano complies with all U.S. state and federal laws and adheres to the latest NIST and FDA Cybersecurity guidance.

Vulnerability Disclosure

At Movano, we deeply appreciate the crucial role that security researchers play in helping us maintain a secure environment for our users. While we don’t have a formal bug bounty program at this time, we warmly welcome and value any vulnerability reports or security tips you may have. If you identify a potential security issue, please contact our security team at security@movano.com. We assure you that your report will receive prompt and thorough attention, and we’ll keep you informed about any future initiatives related to bug bounty programs.

How To Report a security or privacy vulnerability

If you believe that you have discovered a security or privacy vulnerability in your EvieMED Ring product, please report it directly to us at security@movano.com.If possible, please include:

• Specific product and software versions, as well as your device type
• Screenshots or video of the vulnerability
• Any description of the vulnerability, or steps to recreate the behavior

You can also email security@movano.com to report phishing attempts. Occasionally, people will create fake emails or websites designed to imitate EvieMED. This outreach, often referred to as phishing, is an attempt to steal personal information, such as bank account details or passwords. If you receive an email or are directed to a website that looks like EvieMED or Movano Health but asks for confidential information, we advise you to exercise caution. If you need technical support for a security issue — for example, to reset your EvieMED Account password or to review a recent App Store charge — please reach out to our EvieMED Care Team at support@eviering.com. If you have questions or concerns about our Privacy Policy or our data processing, please see more detail here.