Security Architecture
Auroa is a HIPAA-compliant, client-side-encrypted workforce platform. Clinical records stay encrypted end to end, and every file byte lands in a BAA-covered AWS vault.
HIPAA-aligned data separation
Auroa separates workforce rosters from encrypted clinical care records. Sensitive care updates are protected in transit and at rest, while tenant and resident mapping rules strictly limit who can access them.
Client-side encryption
Sensitive fields are encrypted in your browser with a passphrase only your facility holds. Auroa cannot read, recover, export, or decrypt them — including in response to subpoena. If the passphrase is lost, encrypted data is unrecoverable.
In transit & at rest
All traffic is TLS 1.2+ end-to-end. Database storage and backups use AES-256 at rest. Secrets are isolated per environment and rotated.
Access control
Role-based access control (RBAC), per-facility data isolation enforced at the database row level, mandatory 2FA for admin roles, and short-lived session tokens.
Append-only audit trail
Every workforce event is written to an immutable, append-only ledger retained for 7 years (Medicaid COMAR compliant). Exportable for internal review.
Subprocessors
Hosted on a SOC 2 Type II global edge network, managed Postgres database, PCI-DSS Level 1 payment processing, and SOC 2 transactional messaging providers. Full subprocessor list available to customers on written request.
Responsible disclosure
Found a vulnerability? Email support@auroa.io with details and reproduction steps. We respond within 2 business days.
This page describes design and engineering practices in production. It is not an audit report or certification. Auroa is not a regulatory-compliance product and does not guarantee that customers will pass any external audit or inspection.