Encryption everywhere
AES-256 at rest with customer-managed keys in Google Cloud KMS. TLS 1.3 in transit.
Data & Security
Designed for the people reviewing your security.
Every control your DPO, your IT lead, and your supervisory authority asks about — explained in plain language, and documented in code.
Security signals at a glance
Regional residency
EU clinics: Frankfurt + Belgium. US clinics: US-Central with Canadian failover. Inference stays in-region.
Role-based access
Five roles with least-privilege scope. MFA required for Admin and Owner. SSO for clinics that need it.
Support access is granted, not implicit
Faurenis engineers cannot read clinic data without an in-region admin's time-boxed, audited grant.
Append-only audit log
Every action that touches a chart is logged. 7-year retention. Exportable as JSON for your own SOC 2 evidence.
Backups in region
Backups stay in the tenant's region. Cross-region replication is opt-in and requires a contractual amendment.
No training on clinic data
Faurenis does not train models on clinic data. Improvements come from clinician feedback and curated public clinical data.
Incident response on the clock
P0 acknowledgement within 15 minutes during business hours, 1 hour out of hours. Published status page.
The four axes of residency
"EU residency" is four things, not one: where the data is stored, where AI inference runs, where backups live, and who can access it from where. Faurenis answers all four explicitly. Storage and backups stay in-region. Inference runs on in-region model deployments enforced in code. Support access requires an admin-granted, time-boxed read.
We publish the sub-processor list on the Trust Centre and commit to 30 days' notice before any change. Clinic-side DPIAs are easier when the vendor answers all four axes; we have written ours so you can.
Talk to security
Bring the questions your DPO will ask.
We will share the DPA, the sub-processor list, and the pen-test summary on a single call. No marketing layer between you and the people who own the controls.