Security & Trust
Your data, protected by design
Prevexium was built privacy-first for clinical environments. Here is exactly how your data is handled, in plain language.
No PHI required
Do not enter patient health information on any plan. Typed text is screened, and detected identifiers are removed before it reaches our AI providers. Photos and voice recordings are not automatically screened, so keep identifiers out of them. Prevexia works from clinical knowledge and public guidelines, not from patient records.
Business Associate Agreements
Business Associate Agreements (BAAs) will be available to Facility & Enterprise customers that are HIPAA covered entities or business associates once our own agreements with our service providers are in place. A BAA is a contractual safeguard on top of the technical ones, not permission to enter PHI.
Encrypted in transit
All data moving between you and Prevexium is protected with SSL/TLS encryption in transit.
Never used to train AI
We never train AI models on your conversations or inputs. Anthropic and OpenAI, which process your text, photos and audio, do not train on API data by default, and we have opted out of model training with Voyage AI, which powers search. We keep your chat history so you can return to it, and examples you mark helpful improve results without training a model.
Guarded inputs & outputs
Every request to the AI passes through an input guard, and every response through an output guard, before it ever reaches you.
Grounded in authoritative sources
Responses are cited and verified with evidence-based guidelines from the CDC and the regulatory agencies that govern the topic — OSHA, EPA, FDA, DOT, CMS, USP — and NHSN for HAI surveillance definitions. Every citation links to its source. APIC/CBIC standards, evidence-based, not open-ended generation.
Rate-limited & abuse-protected
Always-on rate limiting and abuse protection keep the platform reliable and safe.
HIPAA-aligned by design
HIPAA alignment was a foundational requirement from day one, not a retrofit, reflected in every architectural decision.
Built by a clinician and an operator
Designed by a DNP, MPH, CIC-certified infection preventionist who used these tools in clinical practice, with a healthcare operations strategist. Accountability, not guesswork.
For facilities & health systems: we're happy to walk your security, privacy, or compliance team through our architecture and, once our own vendor agreements are in place, a Business Associate Agreement (BAA) with your Facility & Enterprise plan.
Talk to us about security →