AES-256-GCM at rest
Envelope encryption is scoped per owner across all patient data.
Trust and security
Security should be inspectable.
Named controls protect the record at the service, data and audit layers, with standards and assurance status kept visible.
Architecture and control
Five controls around the record.
The security model combines owner-scoped protection, data-layer enforcement and independently verifiable history.
Implemented
A six-role capability matrix
Access rules are enforced on every service that touches patient data, at the data layer rather than the interface.
Hash-chained, append-only history
SHA-256 audit records are independently verifiable and anchored to a write-once series.
Suppression below five distinct people
k-anonymity is enforced at the query layer, while secure aggregation reconstructs only the aggregate.
Hybrid ML-KEM and ML-DSA
Migration is underway ahead of the 2030 NIST deprecation of RSA-2048 and ECC P-256.
Standards position
Built to named criteria.
Shiora is built to HIPAA technical safeguards and SOC 2 Trust Services Criteria. ISO 27001 certification and ADHICS assessment are underway.
Review standards and certificationsInstitutional review