Skip to content

HIPAA Compliance in HSLynk

Eric Jahn edited this page Jun 19, 2019 · 7 revisions

Architecture of our HIPAA-driven security-related components:

  • separate VPCs for production and development with with separate subnets
  • Bastion host
  • Encryption at rest of S3, Big Data, and relational data stores
  • Encryption of data in motion - SSH, TLS, tokenized APIs, Trusted Apps
  • Identity and access control by role

Other steps:

Clone this wiki locally