HIPAA-compliant from day one.
Lumix Health is built around the assumption that we are handling protected health information. Compliance isn't a feature — it's the floor.
Encryption everywhere
All PHI is encrypted in transit (TLS 1.2+) and at rest (AES-256). Database encryption keys are rotated and managed via AWS KMS.
Least-privilege access
Role-based access control is enforced everywhere. Field staff can only see clients they're assigned to. Admins can audit every read and write.
Audit logs
Every PHI access is logged with user, timestamp, IP, and action. Logs are immutable and retained per HIPAA requirements.
BAA standard
We sign a Business Associate Agreement with every customer at no additional cost. Vendor BAAs are in place with all subprocessors that touch PHI.
Request our security pack
For prospective customers and security teams, we maintain a security review packet including our BAA template, security architecture overview, subprocessor list, and pen-test summary. Email [email protected] to request access.
Ready to see Lumix in your workflow?
Book a 30-minute walkthrough. We'll show you exactly how Lumix fits your service line, your team size, and your billing setup — no slides, just the product.