Trust Center

Security, compliance, and data handling

Security

• Encryption in transit — All API traffic uses TLS 1.2+
• Encryption at rest — Data at rest is encrypted
• API keys — Hashed before storage. Send X-API-Key on every request
• Tenant isolation — Each customer’s keys, facilities, and jobs are isolated
• Rate limiting — Per-key limits

Data handling

• No patient files — Lookups use facility identifiers (CCN), codes, and payer slugs — not claims or EHR extracts
• Agent jobs — Queries and results stay on your tenant. Email [e-mail] to purge
• US infrastructure — Contact us for residency questions

Compliance

RCIntel is HIPAA compliant.

Agents

• Outputs include confidence scores
• Reasoning traces are available on the job
• We do not train models on your queries