For IT & Security
Architected for the review you are about to run.
The short version is here. The full data-flow diagrams, subprocessor list, and compliance roadmap live in the dossier.
Security the patient can see, and you can prove.
Every session begins with explicit camera and recording consent over an encrypted channel. The same controls that reassure the patient produce the evidence your review needs, captured the same way every time.
Tenant isolation by design
Every record is partitioned by an isolation identifier, with practice-scoped access enforced at the data layer, not just the UI.
Least-privilege access
Role-based access control scopes what each user and each service can see. Signed, expiring URLs govern media access.
Built on AWS
Managed identity, encrypted storage, and infrastructure-as-code on AWS Amplify Gen 2 and Cognito.
On a documented compliance path
We are architected toward SOC 2 and HIPAA controls, with a documented roadmap for audit logging and tamper-evidence. We do not claim certifications we do not hold.
The integration question
Do we need to integrate with our EMR to start? No. inFormed Consent runs standalone. Integration is a roadmap you control.
See the integration roadmap →