Trust and security
Your studies are de-identified before they leave your network.
Vendor contracting, BAAs and data handling are managed centrally, under one agreement.
Data flow and PHI
The Satori Gateway runs on-premises and de-identifies studies before sending them to the Satori Cloud for routing to activated vendors. [What leaves the network and what never does; how results are re-associated with the patient; data retention; what AI vendors receive and keep.]
Deployment model
[Cloud, on-premises or hybrid; hosting provider and regions; PHIPA position for Ontario sites]
HIPAA and BAAs
TestDynamics has executed BAAs with [7] AI vendors. [Customer BAA terms]
Security certifications
SOC 2 [Type I or II; report period]. HIPAA-compliant [with the BAA position].
Regulatory status
[Satori’s own regulatory status; how each algorithm’s FDA or Health Canada clearance is verified and shown per use case]
Access and audit
[Access controls, audit logging, incident response contact]