Security & Privacy
Built on the principle of data sovereignty.
Health data is the most sensitive data a person has. We engineered MedAssist to prioritize security at the infrastructure level, not just as an afterthought.
Encryption at Rest
All health data and extracted lab results are encrypted at rest using AES-256 encryption. We never store raw PDFs after processing.
Row-Level Security (RLS)
Our PostgreSQL database employs strict Row-Level Security. Queries are inherently scoped to the authenticated user's session.
Zero Model Training
Data sent to our LLM pipeline is strictly processed ephemerally. We have binding agreements to ensure your data is never used to train foundation models.
Complete Sovereignty
You own your data. You can export your full health timeline or delete your account (and all associated data) at any time.
Private by Design
We collect only the minimum data required to provide actionable clinical insights. If you ever have questions about our data practices, our engineering team is an open book.