Encryption at rest
Is each patient's record sealed under its own key, or does one database leak expose everyone? We test what actually happens to the data.
A two-week, fixed-fee audit of the three things that decide whether a healthcare breach stays small: how PHI is encrypted, whether consent is provable, and how your FHIR and X12 surfaces actually behave.
Is each patient's record sealed under its own key, or does one database leak expose everyone? We test what actually happens to the data.
Grant, refusal and revocation recorded as first-class events — or implied by a login. Auditors ask for the record; we tell you if you have one.
FHIR R4 capabilities, X12 005010 transactions, and the gaps between what you claim and what a payer or CMS will accept.