asaasinSecurity
Built for regulated work, not retrofitted for it.
A SOC 2 Type II report, signed BAAs, HIPAA-aligned controls, and code that ships into your own infrastructure — not ours.
Compliance posture.
SOC 2 Type II
A SOC 2 Type II report exists and is available under NDA on request.
BAAs
Business Associate Agreements are signed. We operate with HIPAA-aligned controls and BAAs in place — there is no such thing as "HIPAA certification," and we do not claim one.
Code, data, and IP ownership
Everything we build ships into your own repositories and infrastructure. You own all code, data, and intellectual property, in full, from day one.
Deployment in your environment
Deployment inside your own environment — your cloud account, your VPC, your infrastructure — is supported.
Transport and browser hardening.
This is not a claim — it is what is configured on this site today, verifiable in the response headers on any page.
Strict-Transport-Security
max-age=63072000; includeSubDomains; preload
Two years of HSTS, applied to every subdomain, and marked eligible for browser preload.
X-Content-Type-Options
nosniff
Browsers are blocked from guessing a response type, closing off MIME-sniffing attacks.
X-Frame-Options
DENY
The site cannot be framed by another origin, which removes clickjacking as an attack surface.
Referrer-Policy
strict-origin-when-cross-origin
Referrer data is limited on cross-origin requests, so URLs are not leaked to third parties.
Permissions-Policy
camera=(), microphone=(), geolocation=()
Camera, microphone, and geolocation access are denied at the browser level, sitewide.
Shipped, not theoretical.
Two HIPAA-aligned platforms are in production today, built and delivered by this team.
Compounding-pharmacy platform
Three portals — clinician, patient, and platform admin — covering prescription routing, exception queues, protocol management, and revenue reporting, built to HIPAA-aligned standards.
Medical-billing audit platform
An admin dashboard built on a Medicare/Medicaid source-of-truth dataset, auditing billing for compliance at scale, built to HIPAA-aligned standards.
Requesting the report
The SOC 2 Type II report is available under NDA. Get in touch and we will send the NDA to sign before sharing it.
Get in touch.
Thirty minutes to map your problem to a plan and a timeline. You will leave the call with scope, price, and a start date.