HIPAA & SOC2 Type II Architecture & Security Controls

All customer and patient data is encrypted in transit using TLS 1.3 with strict cipher suites, and at rest using AES-256 with KMS managed keys.

Personally Identifiable Information (PII) and Protected Health Information (PHI) are tokenized at the ingestion perimeter before storage.

All access attempts, administrative configuration modifications, and data export operations generate immutable audit log records.

Logs are continuously replicated to write-once-read-many (WORM) storage buckets to ensure non-repudiation during compliance audits.