One hub for every question your auditor will ask.
This page is maintained by the MedIQ team to answer common security, privacy, and AI-governance questions about the platform. It reflects current capabilities and is not an independent certification.
Six pillars, deep-linked.
Every row carries a tenant_id; Postgres RLS enforces access at the database, not just the app.
TLS 1.2+ everywhere. AES-256-GCM for sensitive tenant secrets, per-record IV + auth tag.
Super admin, tenant admin, biller, provider, front desk, auditor — gated server-side.
Every status change, role grant, and AI decision written to an append-only tenant-scoped log.
No patient names or member IDs in AI prompts; note text is scrubbed first. Logs record decisions and data class.
Standard BAA included on every plan, executed before any PHI flows.
The third parties that touch MedIQ data.
MedIQ uses a small set of vetted infrastructure subprocessors. Each is covered by a BAA where PHI may transit. We notify customers in writing before adding a new subprocessor to a category that touches PHI.
| Subprocessor | Purpose | Region | PHI? |
|---|---|---|---|
| Application hosting & edge | Application runtime, edge delivery | US | No (de-identified payloads) |
| Managed Postgres | Primary application database | US | Yes — under BAA |
| Object storage | Encrypted documents, ERA files | US | Yes — under BAA |
| Email (transactional) | System emails, password reset, invites | US | No |
| Error monitoring | Server-side error capture (PHI-redacted) | US | No |
| Managed AI gateway | Governed AI inference; no names or member IDs, except card-scan images under BAA | US | No |
Vendor names available under NDA. Enterprise customers receive the named subprocessor list as part of the security pack.
Managed by MedIQ. No tenant model choice.
MedIQ centrally vets, approves, and assigns AI models per task. Tenants never select models or hold third-party AI keys. Read the full governance design on theGoverned AI page.
Need a vendor security review?
We share our security overview, subprocessor list, and a draft BAA under NDA. Most reviews close in under a week.