Security & Compliance

Trust, engineered.

How agenté.health protects patient data — architecture, isolation, governed AI, and the audit trail behind every action.

🔒

HIPAA-Grade

Per-practice database isolation — your patients' records are never commingled with another practice's. PHI only flows over HIPAA-compliant channels.

🔐

Encrypted

TLS 1.2+ on every connection. AES-256 at rest. No exceptions, no downgrade paths.

✅

Governed AI

Irreversible actions — sending a bill, canceling an appointment, exporting records — require your approval first. Full audit trail on everything.

🧭

Expert Governance

AI data governance advised by George Nassar — former AVP, Enterprise AI & Data Governance, Canadian Tire; founder of Data Elephant; author of Real Trading (Forbes Books).

📂

Your Data

Practice data belongs to the practice. Full export anytime — no lock-in, no hostage data.

Architecture

Isolation you can verify.

Not promises in a PDF. Architecture you can inspect: enforced policies, encrypted pipes, and a log of everything your agents touch.

🛡️

Isolated by policy

Every practice's data sits behind force-enabled row-level security — 655 policies across 172 tables, keyed to your account's identity claims, with no application path that can read across practices. Two clinics never see each other's patients.

⛔

Never trained on

Your patient data is never fed to a shared model. We do not use patient data — raw, aggregated, or anonymized — to train, fine-tune, or improve any model, ours or anyone else's. Written into the contract, survives termination.

📜

Append-only audit trail

Every action — read, write, send — is logged to an append-only audit trail. When your compliance officer asks what the AI did last Tuesday, the answer is one export away.

🔐

Encrypted everywhere

TLS 1.2+ on every connection. AES-256 at rest. No exceptions, no downgrade paths.

Expert Governance

Governance is a seat at the table.

George Nassar
George Nassar
AI Data Governance

Fifteen years advising C-suites on enterprise data strategy, governance, and AI adoption. AVP, Enterprise AI & Data Governance, Canadian Tire — built governance frameworks across a multi-billion-dollar retail operation. Founder of Data Elephant. Author of Real Trading (Forbes Books). Regulated data compliance and AI governance aren't a checkbox at agenté — they're a seat at the table.

Commitments

What we don't do

  • We don't train models on your patient data.
  • We don't commingle practices on shared databases.
  • We don't let AI take irreversible actions without your approval.
  • We don't hold your data hostage — full export, anytime.
HIPAA Notice

HIPAA-ready. Attestation in progress.

agenté.health is built HIPAA-ready. A full formal HIPAA compliance attestation — security risk assessment and business associate agreement — is in progress for production deployments. Ask us for the current status of your deployment, or start the conversation on WhatsApp.

Security you can sell to your compliance officer

HIPAA-grade architecture, bilingual EN/ES, live in minutes. Your patients already have WhatsApp.

💬 Start on WhatsApp

HIPAA-grade · Bilingual EN/ES · Puerto Rico & LATAM

HIPAA-grade · Live in minutes 💬 WhatsApp