Burna AI keeps protected health information in an isolated data plane, separate from identity and billing, and de-identified projections feed everything else. Data is encrypted in transit and at rest, every record is scoped to the customer's organization, access is role-based, and every access to patient data is recorded in an audit trail. Clinical notes arrive from the medical record through SMART on FHIR, and a signed grading summary can be filed back to the chart. PHI is kept out of application logs. Burna AI signs a business associate agreement with customers that are covered entities or business associates, and the platform is built for HIPAA and 21 CFR Part 11. Our SOC 2 Type 2 audit is in progress. The subprocessor list at burna.ai/subprocessors shows each category of provider and whether it can reach PHI.
Interactive demo
Try Burna right now, no sign up required.