Built for regulated health data
Cierta works with protected health information, so security isn't a feature — it's the foundation. Here's how the platform is designed to protect data and produce a record you can stand behind.
PHI handling by default
PHI scrubbing is applied at intake, before the chart reaches downstream processing — so analysis operates on protected data, not raw identifiers.
Per-tenant isolation
Row-level security is enforced for every organization, so one customer's data is structurally separated from another's at the database layer.
Tamper-evident audit
Actions are recorded to a hash-chained audit log with periodic anchoring, designed to make the history verifiable and resistant to silent edits.
Production cloud posture
Cierta is deployed on managed cloud infrastructure with encryption, tenant isolation, and least-privilege service roles; real-PHI use stays gated until agreements and approval are complete.
Synthetic-data-first
The platform is developed and demonstrated on synthetic data. Real PHI is gated behind signed agreements and compliance controls.
Least-privilege access
Role-aware access controls and separated administrative paths limit what any one account or service can reach.
Designed to be defended
Cierta's workflow is oriented toward standing behind coding decisions in review. Findings are evidence-linked and MEAT-screened, submission stays behind human approval, and every step is recorded — so the question "why was this coded?" always has a documented answer.
- Evidence linked to every finding
- MEAT-style documentation screening
- Human approval before any submission
- Complete, tamper-evident action history
Where we are, plainly
We believe security claims should be specific and honest. Current posture:
- Today: production deployment for controlled validation under a synthetic-data-first posture; isolation, audit, and PHI controls implemented in the platform
- Real-PHI gate: real client PHI remains blocked until signed agreements, compliance approval, and operational activation are complete
- Underway with counsel: business associate agreement, formal security documentation, and independent assessment
Evaluating Cierta for a regulated environment? We're glad to walk your security and compliance team through the architecture in detail. Request a review →
Bring your security team
We'll go deep on the architecture, controls, and compliance roadmap — no hand-waving.