Privacy & security

# How we protect patient data.

ISO 27001 certified security for your clinical AI workspace.

[Explore the safeguards](/compliance/#architecture) · [Read the privacy policy](https://clinician.rhazes.ai/privacy)

## Data protection standards.

Rhazes is ISO 27001 certified and EU Class I medical-device software, with GDPR and HIPAA compliance built into our security programme.

Data is encrypted when sent and stored. People only see what their role allows, and access is logged.

[Read the product privacy policy](https://clinician.rhazes.ai/privacy)

GDPR: compliant across the UK and EU. HIPAA: compliant.

## Security controls.

Explore our certified security, tested controls and data protection.

### Access checks and monitoring

Enterprise runs on secure cloud servers. Every request for access is checked (zero-trust), and activity is logged and monitored.

### Regular security testing

We run penetration tests and security reviews to find and fix weak spots.

### Protected encryption keys

Dedicated secure hardware protects your encryption keys and other secrets.

### Separate data

Clinical data is kept apart from our system monitoring and analytics. Customer data is not used to train foundation models (large, general-purpose AI models).

## Hosting for your organisation.

Choose regional cloud or private hosting with Enterprise. Keep your data, AI models and clinical workflows under your control.

Choose your hosting, access and AI model setup with us to fit your organisation’s requirements.

Hosting options: regional cloud, private infrastructure, or a shared setup with your data kept separate.

[Contact sales](https://docs.google.com/forms/d/e/1FAIpQLSebgez6kgaKKpU9Z9GWMiOmQ1EYerZYS4enwm2uzSMPDj_-3A/viewform?hl=en)

## Documents for your security review.

Get certification details, security reports and system diagrams for your procurement team. SOC 2 Type II ready; documents available under NDA.

[Request security documents](mailto:contact@rhazes.ai?subject=Rhazes%20security%20documentation)