Security & Compliance

Prescriptions and patient records demand more than "best effort" security. Our product is built natively on Google Cloud Platform, giving your practice enterprise-grade infrastructure with full data governance — every automation component runs inside your own cloud perimeter, under your control, not ours.

  • All processing stays within Google Cloud. Prompts and patient data are never shared with third-party model providers.

  • Every MCP request and response is routed through Google Cloud Model Armor, an inline compliance layer that automatically detects and redacts PHI before it can be exposed or misused.

  • Caching is disabled at the model layer, so sensitive clinical data is processed, not stored. Nothing lingers longer than it needs to.

  • Every action is logged via Cloud Logging into locked, tamper-proof storage with multi-year retention, giving you a defensible record for every audit and every regulator.

  • We execute a Business Associate Addendum directly through the GCP console as part of onboarding, so your compliance obligations are covered before a single record is processed.