Enterprise-Grade Security for Healthcare AI
We built VeriSight with a "Paranoid-First" architecture. We assume all data is sensitive and design our systems to minimize risk at every layer.
Built with HIPAA requirements in mind. All technical and administrative safeguards implemented.
We process your data but never store PHI. Data is deleted after processing.
Built on secure cloud infrastructure with encryption at rest and in transit.
"The safest data is data we don't have."
For our marketing and admission decision support tools, we operate on a strict "Zero Retention" policy. We process the necessary documents to give you an answer (e.g., "Accept/Deny" or "PDPM Rate"), and then we immediately scrub the source files from our servers.
Automated scrubbing of all source files
TLS 1.3 for all data in transit. AES-256 for any data at rest (though we rest very little data).
Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA) enforced for all admin access, and least-privilege principles.
Comprehensive immutable logs of all system actions, access attempts, and data processing events.
Regular automated scanning and third-party security assessments to identify and remediate vulnerabilities.
Our platform is designed with HIPAA requirements in mind, implementing technical safeguards, administrative safeguards, and physical safeguards for protecting healthcare data.
Security policies and procedures documented and maintained. Employee training on HIPAA requirements. Incident response procedures in place. Regular risk assessments conducted.
Unique user identification. Automatic logoff. Encryption and decryption. Audit controls. Transmission security. All technical safeguards are implemented and maintained.
Clinical notes uploaded via encrypted HTTPS connection. Data validated and sanitized on receipt.
AI processes data in memory. Results generated and returned to you. All processing in isolated environment.
Clinical data immediately deleted after processing. No PHI stored in databases, logs, or backups.
No. We process clinical notes in memory and delete them immediately after generating results. No PHI is ever stored on our servers.
No. We do not use your clinical data to train our AI models. Your data is used solely to generate your results and is then deleted.
We can discuss BAA requirements with enterprise customers. Contact us to discuss your specific compliance needs.
Our infrastructure is hosted on secure cloud providers in the United States. We maintain strict security controls and regular updates.
We have incident response procedures in place. In the unlikely event of a security incident, we will notify affected customers within 72 hours as required by HIPAA.
Our team is happy to discuss our security practices in detail. Contact us for a security review, BAA, or to schedule a call with our security team.