Compliance/HIPAA/Healthtech
HIPAA compliance for Healthtech
Covered entities must implement audit-controls mechanisms for ePHI systems (§164.312(b)) + administrative safeguards (§164.308). AI decisions on ePHI fall under both.
What applies
Articles + provisions of Health Insurance Portability and Accountability Act — Security Rule (45 CFR Part 164) most directly engaged by Healthtech deployments:
- §164.312(b)
- §164.308
What this looks like in Healthtech
Covered entities must implement audit-controls mechanisms for ePHI systems (§164.312(b)) + administrative safeguards (§164.308). AI decisions on ePHI fall under both.
Flagship exampleOCR audit: per-decision evidence on AI-touched ePHI access. Chain + Ed25519 attestation answer.
Where Promethean's evidence layer fits
The substrate emits specific evidence kinds that map to HIPAA obligations. Most directly relevant for Healthtech:
For the full sector view including LLM-feature catalogue, tier recommendation, and reviewer-gate examples, see the Healthtech sector page.
Adjacent cells
Other regulations for Healthtech