> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurumhealth.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security and Compliance Overview for Futurum Health AI

> Futurum Health AI is built on HIPAA-compliant infrastructure with end-to-end encryption and audit-ready logging on every patient interaction.

Futurum is built with healthcare-grade security from the ground up. Every patient interaction — calls, notes, vitals, reports — is protected by end-to-end encryption, role-based access controls, and audit-ready logging. You get the simplicity of a modern software product with the security your patients and regulators expect.

## Compliance Certifications

<CardGroup cols={2}>
  <Card title="HIPAA" icon="shield-halved" href="/platform/hipaa">
    Full encryption on all patient data, strict access controls ensuring only authorized staff see sensitive information, and complete audit trails for every interaction.
  </Card>

  <Card title="SOC 2 Type II" icon="certificate" href="/platform/security-compliance">
    Independently verified security controls that meet healthcare industry standards. SOC 2 Type II certification is in progress and goes live alongside the Futurum MVP.
  </Card>

  <Card title="HITRUST" icon="lock" href="/platform/security-compliance">
    Futurum is building toward HITRUST certification alongside MVP launch, applying the moment the product goes live.
  </Card>

  <Card title="AWS Health Infrastructure" icon="cloud" href="/platform/infrastructure">
    Built on Amazon Bedrock with healthcare-grade AWS infrastructure — the same foundation powering national health systems.
  </Card>
</CardGroup>

## Core Security Features

Every layer of the Futurum platform enforces security automatically. You do not need to configure or enable these controls — they are active by default on every account.

* **End-to-end encryption** on all data, both in transit and at rest
* **Role-based access controls** for every user type — clinicians, staff, and administrators see only what their role permits
* **Complete audit trails** generated automatically for every patient interaction
* **Encrypted transmission** between patients, doctors, and staff
* **Automatic vital sign sync** to doctor dashboards over encrypted channels

## How Security Is Managed

Futurum handles security at the infrastructure level so your team can focus on care, not configuration.

* Security controls are active from the moment your account is provisioned — no setup required
* Audit logs are generated automatically for every interaction and are available for review from your dashboard at any time
* Access controls are applied based on staff roles and cannot be bypassed at the application level

For more detail on HIPAA-specific protections, see the [HIPAA Compliance](/platform/hipaa) page. For information on the underlying infrastructure, see the [Platform Infrastructure](/platform/infrastructure) page.

<Note>
  Futurum's security infrastructure is built to meet the requirements of national health systems — whether you're running a 3-provider clinic or a 300-provider hospital network.
</Note>