Compliance · HIPAA
PHI with a paper trail.
HIPAA’s administrative, physical, and technical safeguards map to vault isolation, purpose-based access, and complete audit records.
Requirement → cloakit mapping
How the framework lands in the vault.
Minimum necessary
Each workflow receives only what its purpose allows — full, masked, or redacted.
Access controls
Unique IDs, purpose checks, and automatic denial outside policy.
Audit controls
Every PHI touch recorded with actor, purpose, and timestamp for access reviews.
Transmission security
SDK-to-vault capture keeps PHI off your servers, logs, and error trackers.
See it in context on Healthcare.
Map your framework to the vault.
Bring your auditor’s scariest requirement. We will show where it lands in cloakit.