Security & Compliance | Ensure Health

Every safeguard described below is enforced in the platform's Layer 0 — before any AI processing runs, not audited after the fact.

Data Protection

Encryption in transit: TLS 1.3 enforced at every network hop, internal and external.
Encryption at rest: AES-256-GCM via envelope encryption, with a unique data encryption key per tenant, wrapped by a KMS/HSM-held master key.
Multi-tenant isolation: Row-level security enforced at the database engine level — not solely at the application layer — so a query bug cannot leak cross-tenant data.
Secrets management: No credential is ever stored in plaintext; all secrets resolve at runtime from a dedicated secrets manager with short-lived, automatically rotated credentials.

Consent & Access

Granular, revocable consent — per data-use category, not one blanket checkbox.
Minimum necessary access — every internal request carries a purpose-of-use scope; data-access services return field-level-filtered results, not full records.
Role-based and attribute-based access control, enforced at the API gateway before any request reaches business logic.

Audit & Accountability

Tamper-evident audit logging — append-only, capturing who, what, when, why, and outcome for every PHI-adjacent event.
Full BAA coverage across every subprocessor that touches PHI, with SOC 2 Type II review before go-live.
Vendor Risk Register — every third-party integration classified by PHI-exposure tier and gated accordingly.

Regulatory Posture

Phase 1 is deliberately scoped around lower-risk functionality: information organization, administrative workflows, cost and coverage navigation, appointment navigation. We do not perform autonomous diagnosis, autonomous prescribing, autonomous medication changes, or time-critical clinical commands.

We are not claiming blanket FDA exemption. We conduct function-by-function regulatory assessment as capabilities expand, consistent with the FDA's January 2026 Clinical Decision Support guidance.

Request a Demo Read the full Ecosystem Blueprint (NDA) →