Security Standards

HIPAA Security & Safeguards

Health Insurance Portability and Accountability Act (ePHI Protection)

1. Technical Safeguards (§ 164.312)

Dual-Layer AES-256 Encryption

All ePHI is encrypted in transit via TLS 1.3 and at rest with AES-256 field encryption on patient demographics and clinical narratives.

Audit Controls & ISO 27789

Automated audit trail recording each access, read, update, or deletion of patient clinical records in immutable JSONB ledgers.

2. Business Associate Agreement (BAA)

Eldovian executes Business Associate Agreements (BAAs) with covered entities, guaranteeing strict containment, breach notification protocols, and rigorous access boundaries.

3. Emergency Safety & Clinical Overrides

In compliance with clinical safety protocols, any override of a Drug-Drug Interaction (DDI) or documented patient allergy requires mandatory clinician justification and is logged into the audit ledger with doctor timestamping.