Trust & security
Built for healthcare-grade privacy and safety — from the first line of code.
We believe transparency about what is true today, what is designed into the architecture, and what is on the roadmap is more useful than a list of certifications we haven't earned. Here is our honest account.
What is true today
Built. Tested. Real.
These are things we can say accurately about the platform as it stands today.
Privacy by design
PHI protection is built into the data architecture — not retrofitted. Patient information is stored encrypted, access is scoped to the treating physician, and personal identifiers are redacted before any data is sent for AI processing.
Physician in command
No clinical decision is ever made without a physician. This is architectural: the system is built so that clinical outputs cannot reach a patient or a clinical record without physician review.
Deterministic safety layer
A rule-based safety system runs on every clinical step and cannot be bypassed by any user or by the AI. It is not probabilistic — the outcome is always the same for the same input.
No patient data for sale
We do not sell patient information. We never have. We are building audit mechanisms to make that verifiable over time.
Technical security safeguards
Encryption in transit and at rest, role-based access, tenant isolation, and secrets management are in place today, not scheduled for later. Comprehensive clinical audit trails are partially implemented and being completed.
Designed into the architecture
Not a compliance checkbox — a design principle.
These are architectural decisions baked into the system — not policies that could be changed without rebuilding.
Where data is hosted
Today, the platform's application backend and primary database are hosted in a Microsoft Azure US region. Some supporting services, including third-party AI model providers, may process data in other locations, and we are completing that assessment. In future markets, where data is hosted and processed will follow applicable law and each clinic's agreement — we don't promise a single residency model everywhere.
Physician-only clinical authority
The system is structured so that clinical outputs always pass through a physician before they affect patient care. This isn't a policy — it's an architectural constraint that the code enforces.
Minimal data collection
We collect only what is necessary for care. We don't collect health information on the early-access waitlist. We don't invite patients to enter clinical information until they are in active physician-led care.
Compliance roadmap
Where we're headed — honestly.
We are in early validation. The following certifications and audits are on our roadmap. We'll add them to this page as we earn them, not before.
HIPAA compliance program — formal risk assessment, policies and procedures, and business associate agreements with applicable vendors — in progress, to be completed before any real patient data is processed. Technical safeguards are already built; no independent compliance verification has been completed.
SOC 2 Type I/II — planned as a second-year milestone.
Market-specific data-protection requirements — assessed for each market and each clinic agreement before any deployment outside the United States.
We will not claim certifications we don't hold. When a certification is earned, it replaces this line.
Questions about security?
We take these questions seriously.
If you have specific questions about security, compliance, or data practices — as a physician, an organization, or an investor — we'll answer them directly.
MaatFit is a software platform for licensed clinicians and the organizations they work in. It does not provide medical advice and is not a substitute for professional medical care.