HIPAA & BAA
Security, Privacy & Trust at Othisis
Othisis prioritizes data protection, clinician control, and responsible AI use in healthcare.
Our Approach to Compliance
Built as Documentation Support
Assists with summarization and drafting, not clinical reasoning.
Avoids Clinical Decision-Making
Does not diagnose or recommend treatments.
Clear Responsibility Boundaries
All outputs require clinician review.
Data Privacy & Handling
How Data Is Processed
Used only to generate requested documentation.
Audit Log
Activity is recorded in an audit log.
Retention Principles
Data retained only as long as necessary.
User Responsibility
Users must ensure lawful and compliant data usage.
Doctor-in-the-Loop Safety Model
Mandatory clinician review
Traceability to source inputs
Accountability remains with doctor
What Do We Not Do
Othisis does not
Provide diagnosis
Recommend treatments
Make autonomous decisions
Replace clinician judgment
Secure & Transparent System
Infrastructure & Security Practices
- Secure hosting
- Strong authentication
- Monitoring and logging
Transparency & Trust
- Clear documentation of AI capabilities
- Visible change logs and policy updates
- Open communication on data usage