How Clinia secures your data

The Clinia Trust Center lists Clinia's compliance frameworks and gives access to its audit reports and security policies. This article sums up what it lists and the protections built into the Clinia Context Engine for Health AI.

Compliance

The Trust Center lists these frameworks:

• SOC 2 Type II
• General Data Protection Regulation
• HIPAA Security & Breach Notification Rules
• US Data Privacy
• Certification de la trousse globale de vérification

To read the audit reports, the penetration test results, or the security and compliance white paper, click Request access in the Trust Center.

Built into the product

• Each workspace is an isolated environment, with its own data store, API endpoint, and credentials.
• Applications and AI agents authenticate with OAuth credentials scoped to a single workspace.
• A fact in the patient graph can be traced to the extracted facts behind it, and each extracted fact keeps what its source stated. Audit the Patient Graph shows how.

Before you send health data

Your agreement with Clinia determines whether you can send protected health information (PHI) and whether a business associate agreement (BAA) covers it. Confirm with Clinia Sales before you send any.

Need help?

For a security review or questionnaire, write to Clinia Support and include your organization name.