Security
Current practice and planned work, stated separately.
METHUVIA AI does not claim HIPAA compliance, SOC 2, HITRUST, FDA clearance, or any other certification. The lists below separate what is in place from what is still planned.
METHUVIA AI prepares the review. The pharmacist makes the final coverage decision.
Do not submit protected health information through the public demo or contact forms.
Current controls
In place for the product and this website.
- Source code is kept in a private repository
- Environment configuration is separated from the application
- Demonstrations use synthetic examples
- Application access is restricted
- This public website does not accept patient records or clinical file uploads
Planned
Not done, and not a certification. Listed so the roadmap is not mistaken for current state.
- Further role-based permissions
- Audit logging
- Encryption and retention hardening for stored documents
- A formal security and compliance assessment before real patient data is in scope
This website
Illustrations on this site are synthetic examples. They do not show patient information or payer identifiers. The public website does not accept uploaded patient records.
Report a security concern
If you believe you have found a security issue, use the contact page. Do not include patient information in that message.