> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurumhealth.ai/llms.txt
> Use this file to discover all available pages before exploring further.
# Clinic Security and HIPAA Compliance in Futurum
> Futurum Health AI is HIPAA-compliant with end-to-end encryption, strict access controls, and audit trails for every patient interaction in your clinic.
Every patient interaction handled by Futurum is protected by end-to-end encryption, strict role-based access controls, and comprehensive audit logging. Futurum is built for HIPAA compliance from the ground up — and it's designed so your clinic can demonstrate that compliance at any time.
## Compliance certifications
Futurum's security framework is built on four pillars, each addressing a different layer of healthcare data protection.
Full encryption on all patient data, strict access controls to ensure only authorized staff see sensitive information, and complete audit trails for every patient interaction.
Independently verified security controls that meet healthcare industry standards. Futurum is pursuing SOC 2 Type II certification from day one — when the MVP launches, these verified controls launch with it.
Futurum is building with HITRUST certification in mind and will apply for it the moment the MVP launches. Every architectural decision is made with HITRUST requirements as a design constraint.
Powered by Amazon Bedrock on AWS Health-grade infrastructure — the same AI and cloud foundation running national health systems. Enterprise-grade reliability and security without enterprise complexity.
## What Futurum protects
Futurum's encryption and access controls apply to every category of patient data your clinic generates or collects:
* All patient conversations and visit recordings captured by AI Scribe
* Clinical notes and SOAP documentation from Charting AI
* Billing records and medical codes from AI Medical Coder
* Health data and biometrics from connected devices via Health Chronicler
* Pre-assessment and intake information from Pre-Assessment AI and Nursing AI
No patient data is transmitted, stored, or accessed outside of Futurum's encrypted, access-controlled environment.
## Access controls
Futurum enforces role-based permissions across your entire clinic. Access controls ensure that every staff member sees only the patient data relevant to their role — and that every access event is recorded.
* **Role-based permissions** limit data visibility to what each staff member needs to do their job. Front desk staff, clinical providers, billing teams, and administrators each operate within their own scoped view.
* **Every access event is logged** with the user's identity, the record accessed, and a precise timestamp. Nothing happens in Futurum without a traceable record.
* **Audit trails are available for review at any time.** You do not need to request a report or configure a separate logging system — the full audit log is always accessible in your dashboard.
Futurum generates audit-ready logs for every patient interaction automatically. You don't need to configure this — it's on by default.
## Learn more
For a detailed breakdown of how Futurum implements HIPAA requirements across data handling, storage, and transmission, see the [HIPAA compliance overview](/platform/hipaa).