AITPRM Health processes vendor questionnaire responses, policy and architecture documents, subprocessor registers, reviewer scores and findings. It does not process protected health information, clinical records, patient identifiers or live data from clinical systems. The platform is not a PHI system.
SAML single sign on with SCIM provisioning (Enterprise360). Role based access control. Enforced multi factor authentication. Least privilege by default.
TLS 1.2 or above in transit; AES-256 at rest; key rotation on a defined schedule. Encrypted backups with defined recovery objectives, tested on a regular cycle.
Logical tenant separation. No customer data is used to improve the service for another customer. No model training on customer content.
Security issues reported through the contact form are triaged on receipt. Framework mapping to NIST AI RMF 1.0, ISO/IEC 42001, HTI-1 and CHAI.
Subprocessors for hosting, email delivery and monitoring. Current list available on request. United States regions. No subprocessor receives PHI. Named under NDA.
Security documentation is available on request. Architecture and data flow detail, and subprocessor list on request under NDA.
We do not describe the platform as HIPAA compliant or as certified to any standard we do not hold. Mapped and aligned describe structure, not certification. Requests: contact form at aitprmhealth.com. © 2026 ReMyll. AITPRM Health™ is a trademark of ReMyll.