Burna AI is built for HIPAA: protected health information (PHI) lives in an isolated data plane, separate from identity and billing, and Burna AI signs a Business Associate Agreement (BAA) with customers. HIPAA has no government certification; what a covered entity needs from a vendor is the safeguards and the BAA. PHI is encrypted in transit and at rest. Access is role-based and scoped to your organization, with SSO and SAML sign-in, and every access to patient data is recorded in an audit log that is kept even when a patient's data is erased. Application logs carry record identifiers rather than patient details, and known PHI fields are redacted before a log line is written. The subprocessors that support the platform, and which of them can reach PHI, are listed at burna.ai/subprocessors.
Interactive demo
Try Burna right now, no sign up required.