Early-stage transparency: Complern is an actively developing platform. The security architecture described here reflects our design intent and direction. Formal certifications (SOC 2, HIPAA attestation) are on our near-term roadmap. We recommend discussing your specific compliance requirements with our team before deployment.
Hospitals entrust Complern with their most sensitive workforce data. We take that responsibility seriously — with HIPAA-compliant architecture, SOC 2 Type II certification, and a security program designed for regulated environments.
Complern maintains the certifications required by hospital procurement, IT security, and legal teams.
Every layer of Complern's infrastructure is designed to meet or exceed the HIPAA Security Rule and NIST Cybersecurity Framework requirements.
All data is encrypted using industry standards throughout its lifecycle — from the browser to the database.
Complern runs on AWS in a HIPAA-eligible environment with high availability architecture across multiple availability zones.
Role-based access controls ensure that each user, API key, and system component only has access to exactly what it needs.
Continuous security monitoring with documented incident response procedures aligned to HIPAA Breach Notification requirements.
All Complern employees and contractors handling PHI undergo background checks, security training, and access reviews.
All third-party vendors with access to customer data are assessed and contractually obligated to HIPAA-equivalent security standards.
SOC 2 report, penetration test summary, or custom security questionnaire — contact our security team.