Trust · One-page summary
Security and architecture summary
A printable page to forward to your CISO and privacy office. The full detail is on the IT and security review page and in the security packet.
Data flow
- Epic to Aurifex Admission and chart data HL7 v2 ADT events and FHIR R4 reads, including notes Read-only
- Inside Aurifex Predict, flag and draft Discharge model and language model, with a source for every statement Nothing sent to Epic yet
- Aurifex to Epic Worklist columns Model date, disposition and Possible IRF flag, labeled as suggestions Display only
- Your team Review and approve The case manager or physician checks the sources, edits, approves or rejects A person decides
- Aurifex to Epic or facility Order, packet or note Pended order signed by the physician, packet sent through your referral platform Write-back after approval
Integration
- Backend FHIR R4 app, OAuth 2.0 client credentials with a signed JWT, read-only scopes
- HL7 v2 ADT: A01, A02, A03, A04, A08
- Results in worklist columns and a Discharge Planning view your analyst builds
- Write-back only after a named person approves
- If Aurifex is down, Epic keeps working. Stale columns go blank
Hosting and data
- US regions only, a separate database per hospital
- TLS 1.2+ in transit, AES-256 at rest, keys per tenant
- BAA signed before any patient data is shared
- Subprocessors: AWS (hosting) and Azure OpenAI Service (model API, note excerpts only, zero data retention)
- Data returned or destroyed within 30 days of exit
Controls
- SSO and MFA for staff, least privilege, full audit trail
- Third-party penetration test: most recent Q3 2026; repeated yearly
- Continuous vulnerability scanning
- Breach notice within 72 hours of discovery
- SOC 2: Not yet; Type I targeted Q2 2027
Pilot IT effort
- About 100 hours of IT time over 20 weeks
- About 70 of them in weeks 0–6
- Epic, interface, identity and security roles
- Estimated; confirmed at kickoff
Contact: info@aurifexhealthcare.com. Epic is a trademark of Epic Systems Corporation. Aurifex is not affiliated with or endorsed by Epic.