Security

This page is a placeholder pending the full Security Overview.

• HIPAA-aware build with signed BAAs with all pilot practices
• Six-year audit-log retention per HIPAA requirements
• Zero-retention model providers; no patient data is used to train models
• Human-in-the-loop approval gate on all financial actions
• Access controls limited to designated practice users

Full Security Overview, SOC 2 roadmap, and pen-test results will be published before general availability. For pilot-related security questions, email hello@heliosagenticlabs.com.