Security and Compliance


We built Altair to handle the most sensitive data in healthcare.
Every feature, every line of code, every infrastructure decision is made with patient privacy in mind.

Security and Compliance


We built Altair to handle the most sensitive data in healthcare.
Every feature, every line of code, every infrastructure decision is made with patient privacy in mind.

Security and Compliance


We built Altair to handle the most sensitive data in healthcare.
Every feature, every line of code, every infrastructure decision is made with patient privacy in mind.

Built for Healthcare

Built for Healthcare

Built for Healthcare

HIPAA Compliant

Our platform meets all HIPAA Privacy and Security Rule requirements for protecting ePHI.

HIPAA Compliant

Our platform meets all HIPAA Privacy and Security Rule requirements for protecting ePHI.

HIPAA Compliant

Our platform meets all HIPAA Privacy and Security Rule requirements for protecting ePHI.

BAA with Every Account

We sign a Business Associate Agreement at signup, not just for enterprise customers.

BAA with Every Account

We sign a Business Associate Agreement at signup, not just for enterprise customers.

BAA with Every Account

We sign a Business Associate Agreement at signup, not just for enterprise customers.

US Data Residency

All data is processed and stored in the United States on Microsoft's enterprise grade infrastructure.

US Data Residency

All data is processed and stored in the United States on Microsoft's enterprise grade infrastructure.

How We Protect Your Data

How We Protect Your Data

How We Protect Your Data

Encryption

Data encrypted at rest using AES-256 Data encrypted in transit using TLS 1.2+

Encryption

Data encrypted at rest using AES-256 Data encrypted in transit using TLS 1.2+

Monitoring

Comprehensive audit logs of all PHI access Real-time monitoring for suspicious activity

Monitoring

Comprehensive audit logs of all PHI access Real-time monitoring for suspicious activity

Infrastructure

Hosted on Microsoft Azure (HIPAA Business Associate), with network isolation and firewalls

Infrastructure

Hosted on Microsoft Azure (HIPAA Business Associate), with network isolation and firewalls

Governance

Strict Role-Based Access Control (RBAC)

Governance

Strict Role-Based Access Control (RBAC)

Your Data, Your Control

Your Data, Your Control

Your Data, Your Control

What we do

Your Data, Your Control

What we do

Process ePHI only to provide the services you request

De-identify data following HIPAA Safe Harbor standards when used for platform improvement

Return or destroy ePHI upon account termination at your direction

Process ePHI only to provide the services you request

De-identify data following HIPAA Safe Harbor standards when used for platform improvement

Return or destroy ePHI upon account termination at your direction

What we do

What we don't do

What we don't do

What we don't do

Sell your data

Share ePHI with third parties except as needed to provide services

Use identifiable patient data to train models for other customers

Sell your data

Share ePHI with third parties except as needed to provide services

Use identifiable patient data to train models for other customers

The Legal Side

The Legal Side

The Legal Side

Terms of Service

Governs your use of the S7 Lab platform

Privacy Policy

How we collect, use, and protect your information

Business Associate Agreement

HIPAA-required agreement for PHI handling

Terms of Service

Privacy Policy

How we collect, use, and protect your information

Business Associate Agreement

HIPAA-required agreement for PHI handling