SECURITY & COMPLIANCE
Enterprise-grade security, built for healthcare AI.
Enterprise-grade encryption, rigorous compliance and continuous monitoring. We treat your data security as our primary feature.
✓HIPAA Compliant✓SOC 2 Type II✓ISO 27001✓BAA Available✓AES-256 · TLS 1.2+✓24/7 Monitoring
HOW WE PROTECT YOU
Security at every step of the encounter.
01Zero Trust architecture
Every request verified. No implicit trust.
Each access request is authenticated, authorized and encrypted — regardless of network location or user.
✓Verify explicitly on every request✓Least-privilege, just-in-time access✓Continuous session validation
02Encryption & data protection
PHI protected in transit and at rest.
Data is encrypted end to end and stored redundantly across regions on AWS and GCP.
✓TLS 1.2+ in transit, AES-256 at rest✓Secure key management✓Geo-redundancy and regional failover
0324/7 monitoring
Threats stopped before they escalate.
AI-powered detection and a dedicated security operations team watch every service around the clock.
✓AI threat detection and anomaly alerts✓Prompt-injection and DDoS defenses✓Rapid, documented incident response
04AI governance
Responsible AI, with humans in charge.
Murphi is built with fairness, transparency and accountability — and clinicians review every AI output.
✓Customer data never trains models✓No sensitive data memorized✓Bias assessments and human oversight
TECHNICAL SAFEGUARDS
Industry-leading controls at every layer.
CLOUDSecure cloud hostingAWS & GCP with geo-redundancy, regional failover and DDoS protection.
IAMIdentity & accessGranular RBAC, least privilege everywhere, strong MFA and SSO.
VULNVulnerability managementOWASP-aligned coding, automated scans and annual penetration tests.
DRDisaster recoveryTested recovery plans with automatic, redundant backups.
ENCData encryptionTLS 1.2+ in transit, AES-256 at rest, secure key management.
BAABusiness Associate AgreementA fully executed BAA for every customer and integration.
CERTIFICATIONS
Three pillars of compliance.
SOC 2SOC 2 Type IIControls for security, availability and confidentiality — operating effectively over time.
HIPAAHIPAA CompliantAdministrative, physical and technical safeguards for PHI across every deployment.
ISOISO 27001A formally governed, risk-driven Information Security Management System.