Security Built for Modern Healthcare
Tulu Health runs on a zero-trust, natively encrypted architecture, exceeding industry standards to protect your clinical and financial systems.
HIPAA Native
The full stack, from database ingestion to LLM inference, runs on HIPAA-compliant cloud. Business Associate Agreements (BAA) are signed before any data moves.
SOC 2 Type II
We hold ongoing SOC 2 Type II certification, continuously audited by third-party firms against the trust services criteria.
Zero-Retention Inference
Clinical data sent to our AI nodes is never logged or used for cross-tenant training. It lives in ephemeral clusters only while it is processed.
End-to-End Encryption
AES-256 at rest, TLS 1.3 in transit. Keys rotate on enterprise Hardware Security Modules (HSM) that fully isolate each tenant.
Enterprise Security, by Default
Every layer, from ingestion to inference, is built to protect PHI. Tenants stay isolated, keys rotate on HSMs, and clinical data never leaves the boundary it was processed in.