Security & development

Rounding Brain is being developed for authenticated healthcare professionals. This page describes the public website’s current safeguards and the clinical product’s development status.

This website is public

A login is not needed to read about the product. This website contains only public company and product information. It has no patient portal, clinical data store, file uploads, or AI chat. It is not connected to the Rounding Brain application’s patient state.

Website safeguards in place

The website is served over HTTPS, with browser security headers that restrict scripts, framing, forms, and external connections. Its application code has no tracking scripts, cookies, request-body logging, or patient-data intake endpoints.

Clinical product status

The product is in development and is not yet available for production clinical use. Development and testing use synthetic or de-identified data. Clinicians remain responsible for reviewing information and making clinical decisions.

Before production use with patient information

Production use involving protected health information remains contingent on an appropriate HIPAA review, required business associate agreements, and verified service configurations. The planned safeguards include individual clinician authentication, appropriate access controls, encryption, auditability, retention and deletion rules, and operational security procedures. These are production requirements to complete and verify, not a claim that the development application already implements every safeguard.

Any use of OpenAI with protected health information will require an executed BAA and the eligible organization, services, and configuration. That process is pending. Publishing this website does not certify the product as HIPAA compliant.