Security
Built for healthcare
data security.
Healthcare data requires the highest levels of security and compliance. Our platform is designed from the ground up to meet and exceed these standards.
How we protect your data
Security and compliance,
by design.
SOC 2 Type II compliance
Continuously audited and certified for SOC 2 Type II compliance for over 5 years, ensuring the highest standards of security, availability, and confidentiality.
HIPAA security & privacy
Rigorous HIPAA Security Rule compliance with independent audits covering security, confidentiality, and availability requirements for the past 5 years.
Single-tenant architecture
Your data is completely isolated in a single-tenant architecture. Customer data is never intermingled or shared across organizations.
Serverless infrastructure
Built on secure, serverless application architecture that reduces attack surface and ensures automatic security updates and patching.
No third-party data sharing
Aside from cloud hosting providers, we use no sub-processors. Your data never leaves our secure environment or gets shared with consultants or ancillary vendors.
US-only operations
All data processing occurs within the continental United States. We maintain a no-offshoring policy with all employees based in the United States.
Continuous security
Continuous security
and monitoring.
Proven track record.
With over 5 years of continuous SOC 2 Type II and HIPAA compliance audits, we’ve demonstrated our commitment to maintaining the highest security standards. Our compliance isn’t just a checkbox—it’s foundational to how we operate.
Every aspect of our platform, from data ingestion to analytics delivery, is designed with security and privacy at its core.
Your data, protected.
Our single-tenant architecture means your data is completely isolated—never shared, never intermingled with other customers’ data. This provides an additional layer of security and ensures complete data segregation.
With serverless architecture and US-only operations, we minimize security risks while maintaining full control over your sensitive healthcare data.
AI in your work
How agents are used,
and how we tell you.
Disclosed plainly
Each work product states how AI was used in producing it, consistent with ASOP No. 41. Nothing is discovered after the fact.
Treated as a model
We treat agents as models under ASOP No. 56. Our actuaries understand their limits, validate their output, and never defer to what the model said.
Evaluated before release
Every agent version is run against evaluation sets built from historical engagements with known answers.
Audit trail per deliverable
Data version, agent version, tool calls, reviewer, and sign-off are recorded for every work product.
PHI under BAAs
Protected health information is processed only in HIPAA-compliant environments, under business associate agreements with every model provider.
A named actuary
A credentialed actuary signs each deliverable and remains your point of contact.
Questions about our security?
Our security and compliance teams are here to answer any questions about our security posture and provide additional documentation as needed. Contact us at security@accorded.com.