The Compliance Center
One place to manage your HIPAA posture, from account to field.
On this page
What it is #
The Compliance Center, at /compliance, is where you manage and monitor your app's HIPAA posture. It works at four levels, from the whole account down to a single field.
The four levels #
| Level | What you manage |
|---|---|
| Account | BAA record, security & privacy officials, breach-notification contacts, responsibilities and training acknowledgements, account 2FA, and an overall readiness score. |
| Database / App | The HIPAA-database flag, backup posture, which tables hold PHI, RLS status, file-field security, and whether users have 2FA. |
| Interface | For each interface (Vibe project): where it's hosted and whether that hosting is BAA-covered. |
| Fields | Classify each field: does it hold PHI, should it be masked or encrypted. |
It flags risks it finds #
Beyond letting you record posture, the Center actively surfaces gaps — for example a PHI table that isn't locked down with row-level security, or a file field on a PHI table that isn't marked Secure. Work down the list until your readiness score is where it needs to be.