Security & Compliance
Protecting patient trust through industry-leading security standards and HIPAA compliance.
Secure by Design
Curenium's architecture follows a "Security-First" principle, ensuring that Protected Health Information (PHI) is isolated and protected at every layer of the stack.
Encryption Standards
- At-Rest: All clinical data is encrypted in the database using AES-256 encryption.
- In-Transit: All traffic between the browser and our servers is secured via TLS 1.3 to prevent man-in-the-middle attacks.
- Backups: Database backups are encrypted and stored in geo-redundant, air-gapped environments.
Access Control
We employ strict Role-Based Access Control (RBAC) to ensure that staff can only access data necessary for their clinical functions.
Multi-Factor Auth
Mandatory 2FA for all clinical and administrative accounts.
PHI Masking
Sensitive patient identifiers are masked in non-clinical views to prevent accidental exposure.
Compliance Frameworks
Curenium is built to exceed global regulatory requirements for healthcare data.
HIPAA (USA)
The system strictly adheres to the HIPAA Security Rule, including administrative, physical, and technical safeguards.
GDPR (EU)
For European implementations, we provide full data residency options and "Right to be Forgotten" workflows that comply with GDPR mandates.
Patient Data
(Plain Text)
AES-256
(Encryption)
Secure Vault
(Storage)
Every access attempt, successful or failed, is logged. Administrators receive immediate alerts for suspicious login patterns or unusual bulk-data access.