Security & trust
Enterprise-grade security. Honest about where we are.
What protects your data today, and what is still in audit. We claim no certification before it is earned.
HIPAA compliant · BAA ready · AES-256 · TLS 1.2+
How your data is protected
Six pillars, built in from the start.
Encryption everywhere
AES-256-GCM at rest, TLS 1.2+ in transit, with a dedicated key-management service.
Tenant isolation
Row-level security in PostgreSQL keeps every organization's data cleanly separated.
Access control
Fail-closed RBAC with SAML 2.0 and OIDC single sign-on for AD and Okta.
Audit & accountability
Every access is logged with user, timestamp, and reason. AI decisions carry explainability traces.
FHIR data model
No proprietary schemas and no lock-in. Your data stays standards-based and portable.
Deployment flexibility
Cloud, private cloud, or on-premise, including air-gapped, for data-residency requirements.
Legal agreements
HIPAA Business Associate Agreement (BAA). Available for enterprise customers and signed before any protected health information flows.
GDPR Data Processing Agreement (DPA). Standard contractual clauses and a DPA are available for EU data processing.
Responsible disclosure
Found a vulnerability? Email hello@agilimed.com with the details and we will respond promptly. Please give us reasonable time to investigate and fix it before any public disclosure.
Questions about security?
Talk to our team.
We will walk your security and compliance teams through the details.