Security built into
every layer.
Patient information deserves care at every step. Here's how Althais protects it.
Encrypted,
everywhere it goes.
Data is encrypted in transit with TLS 1.2 or newer and encrypted at rest, on infrastructure built for HIPAA-eligible handling of PHI.
Sessions that expire,
passwords that change.
Sign-ins time out, temporary passwords must be replaced on first use, and paused accounts can't sign in at all.
Built to SOC 2
Trust Services criteria.
Access controls, change management and monitoring are built to SOC 2 Trust Services criteria as we complete a formal audit.
Built for the work,
not around it.
HIPAA
HIPAA-eligible handling of PHI, with BAAs on Enterprise plans.
SOC 2 ready
Built to Trust Services criteria; formal audit in progress.
Encryption
TLS 1.2+ in transit, encrypted at rest.
Role-based access
Set and adjusted by your managers.
Audit logs
Including any Althais support view.
Session safety
Timeouts and forced password changes.
How Althais is secured.
- In transit
- TLS 1.2 or newer on every connection
- At rest
- Data encrypted where it is stored
- Access
- Role-based; managers grant and remove access
- Sign-in
- Sessions time out; temporary passwords must be changed on first use
- Paused accounts
- Can't sign in until a manager restores them
- Support access
- Althais staff viewing an account is time-limited and logged
- Audit trail
- Sign-ins, consequential actions and access changes are recorded
- SOC 2
- Controls built to Trust Services criteria; formal audit in progress
Asked and answered.
Does the Althais team see our patients' data?+
Only when needed to support you, and every such view is logged.
Can we control who sees what?+
Yes. Managers set each role's access and can pause or remove a person at any time.
Is Althais SOC 2 certified?+
Not yet. Our controls are built to SOC 2 Trust Services criteria and we're completing a formal audit.
More of Althais.
Pricing
Three tiers priced around claim volume, not seats.
Open For Your PracticeHIPAA Compliance
The safeguards behind Althais and what your clinic controls.
Open For Your PracticeHow It Works
One encounter from the note to the payment, in eight steps.
Open PlatformAI Scribe
Record or paste a visit; get a SOAP note to review and sign.
Try the demo