Security

What we can say today

• anchor is built on SMART on FHIR to work inside existing EHR infrastructure.
• Patient data is never sold.
• An independent security review and penetration testing will be completed before any pilot goes live.

Where the product stands

The current environment is a prototype that holds demonstration data. It is not approved for real patient health information, and it should not be used with any. We make no claim of HIPAA compliance or of any security certification.

What we are building toward

Before a pilot, we plan to put safeguards in place that match what health systems expect, including:

• Encryption at rest and in transit
• Role-based access controls
• Audit logging
• Identity verification workflows

These are planned for production and may not all be in the prototype yet. We will document them here as they are completed.