HIPAA compliant
SOC 2 Type II and BAA.
Security overview
The controls that make it possible to take part in a consultation without compromising trust, privacy, or governance.
Consent
Said in plain words, in the room — and recorded with the case.
Retention
The institution controls it — policy, window and deletion.
Training
Never on identified data. No exception to sell.
Enterprise deployment available.
Inside the institution's own cloud and perimeter, isolated, with a full audit trail.
Bring your own model.
Run your own model alongside Sofya's — same interface, same guardrails.