What hardware does Tap To Track require?

Standard NFC tags or QR code labels. No proprietary hardware or expensive scanners required. Any modern smartphone or tablet works as the reader.

Does NarcTrack handle both controlled and non-controlled medications?

Yes. NarcTrack tracks both controlled and non-controlled substances in a single system, with configurable rules and alert thresholds for each category.

How do audits and reports work?

NarcTrack generates complete chain-of-custody reports on demand — every movement, signature, and variance — organized by date, provider, unit, or medication.

How does the diversion engine detect potential issues?

The engine monitors for statistical anomalies: unusual access timing, repeated count variances, and pattern deviations — comparing against your agency's own baseline data.

Your agency owns its data. NarcTrack provides complete export capabilities at any time in standard formats.

NarcTrack — Verified Medication Accountability for EMS

Last Updated: 3/6/2026

1. Introduction

Veritas Technology Solutions ("Company", "we", "us", or "our") operates the NarcTrack platform (the "Service"). We are committed to protecting your privacy and ensuring the security of the data entrusted to us, particularly given the sensitive nature of medication tracking and inventory management. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

2. Information We Collect

We collect information to provide better services to all our users. The types of information we collect include:

Account Information: When you register for NarcTrack, we collect personal information such as name, email address, agency affiliation, and role.
Operational Data: We collect data related to your agency's medication inventory, transaction logs, and user activity within the system.
Usage Data: We may collect generic information about how you interact with our Service, including access times, pages viewed, and IP addresses, for security and optimization purposes.

3. HIPAA and Protected Health Information (PHI)

While NarcTrack is primarily an inventory and compliance tracking system, we acknowledge that certain operational contexts may involve data considered Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA).

We act as a Business Associate to our covered entity clients. We implement administrative, physical, and technical safeguards appropriately to protect the confidentiality, integrity, and availability of electronic PHI that we receive, maintain, or transmit on behalf of our clients.

4. Diversion Detection & Investigation Support

To fulfill our mission of preventing medication diversion, NarcTrack captures extensive backend data during system usage, including but not limited to:

Geolocation Data: Physical location coordinates during "Tap to Trax" events and other critical transactions.
Device Telemetry: Device fingerprints, IP addresses, and unique identifiers to detect unauthorized access or anomalies.
Behavioral Analytics: Interaction patterns that may indicate suspicious activity.

Cooperation with Investigations: We serve as a neutral system of record. In the event of an internal inquiry, regulatory audit, or criminal investigation, we reserve the right and may be legally obligated to provide this granular data to:

Organizational leadership and administrators (e.g., Medical Directors, Chiefs).
Local, state, or federal law enforcement agencies.
Regulatory bodies (e.g., DEA, State Boards of Pharmacy).

5. Use of Your Information

We use the collected data for the following purposes:

To provide, operate, and maintain the NarcTrack platform.
To process transactions and generate compliance logs for your agency.
To improve our Service, including debugging and developing new features.
To communicate with you regarding updates, security alerts, and support.
To enforce our terms, conditions, and policies.

6. Data Security

We prioritize the security of your data. We utilize enterprise-grade cloud infrastructure provided by Supabase, which adheres to SOC2 Type 2 standards. Our security measures include:

Encryption: All data is encrypted at rest (AES-256) and in transit (TLS 1.2+).
Access Controls: Strict role-based access controls (RBAC) ensure that data is only accessible to authorized personnel.
Regular Audits: We conduct regular security reviews and vulnerability assessments.

7. Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

Service Providers: With third-party vendors who perform services on our behalf (e.g., cloud hosting, email delivery), subject to strict confidentiality agreements.
Legal Compliance: If required by law, regulation, or legal process, such as a court order or government request, particularly regarding controlled substance regulations.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].