Trust, Security & HIPAA Posture
DirectBaseline is architected from day one to uphold strict healthcare data isolation, end-to-end encryption, and rigorous clinical privacy standards.
Encryption & Transport
All data in transit is encrypted using modern TLS 1.3 standards. Telemetry at rest is secured via AES-256 bit encryption within SOC-2 certified cloud infrastructure environments.
Role-Based Access (RBAC)
Granular multi-tenant isolation ensures strict separation. Clinicians only access patients assigned to their clinic ID, and coaches are restricted from viewing full diagnostic records.
HIPAA & BAA Execution
All production environments handling Protected Health Information (PHI) are backed by formal Business Associate Agreements (BAAs) executed directly between healthcare partners and Vandalia Software LLC.
Compliance Standards Overview
Protected Health Information (PHI) Separation
Marketing websites and public landing pages are completely air-gapped from production databases and authenticated clinical portals.
Audit Trails & Activity Logging
Every access request, record query, and telemetry export is timestamped and indexed for clinical audit reviews and CMS compliance checks.
Vulnerability Management & Edge Defense
Enterprise edge network mitigation protecting endpoints against DDoS attacks, automated malicious scanners, and injection threats.
Need a security questionnaire or copy of our standard BAA? Contact our compliance desk at info@directbaseline.com.