Trust & Infrastructure
Security &
compliance
Your patients' data, in your own cloud — encrypted, logged, and under your control.
Data protection
Encryption at rest
Patient data encrypted at rest using industry-standard encryption (AES-256). Database-level encryption with managed keys.
Encryption in transit
Data encrypted in transit using modern TLS (1.2+) across all endpoints.
Access controls
Role-based access control (RBAC) with practitioner-level permissions. Session timeout enforcement.
Designed for HIPAA
neuromore is designed to meet HIPAA requirements for protected health information (PHI).
- Business Associate Agreement (BAA) — your organization signs directly with AWS
- PHI encrypted at rest and in transit
- Access logging and audit trails
- Minimum necessary access principle
- Infrastructure monitoring and alerting
- Deployed in your own cloud account, so compliance stays under your control
Cloud infrastructure
neuromore deploys into your organization's own cloud account — giving you full control over where your data lives and how it's managed.
Your cloud account
neuromore deploys into your organization's own AWS account. Your data never leaves infrastructure you control. Built on AWS, whose underlying infrastructure is independently SOC 2 Type II certified.
Backups & recovery
Automated backups with recovery options. Retention and replication configured to your organization's requirements.
Monitoring
Continuous infrastructure monitoring with automated alerting for anomalies. CloudWatch integration for visibility into your environment.
Audit trail & logging
Every access to patient data is logged. Session starts, data exports, configuration changes, and login events are recorded with timestamps and user identity.
Data residency
Because neuromore deploys in your own cloud account, you choose the region. US, EU, or wherever your compliance requirements dictate. Your data stays where you put it.
Bring your compliance team.
Tell us what your compliance team needs, and we'll walk through it — documentation included.
Schedule a security call