Get Started 
SOC 2 Type II
Certified Compliant
Enterprise-Grade Security
Your healthcare data deserves the highest level of protection. Learn how Affine keeps your PHI safe.
HIPAA
Fully Compliant
Encryption
At Rest & In Transit
Our Approach
Security by Design
Security isn't an afterthought—it's built into every layer of our platform.
Your Data, Your Environment
PHI never leaves your Snowflake environment. We deploy code to your infrastructure—your data stays where it belongs.
Zero Trust Architecture
Every access request is verified. Role-based access controls ensure users only see what they need to see.
Complete Audit Trail
Every query, every access, every change is logged. Full visibility for compliance and forensics.
Security Controls
Defense in Depth
Multiple layers of security protect your data at every stage.
Data Protection
-
AES-256 encryption at rest - TLS 1.3 encryption in transit
- Field-level encryption for sensitive data
- Secure key management (AWS KMS/Azure Key Vault)
- Data masking and tokenization options
Access Control
- Role-based access control (RBAC)
- Multi-factor authentication (MFA)
- Single sign-on (SSO) integration
- Principle of least privilege
- Regular access reviews
Monitoring & Logging
- Real-time security monitoring
- Comprehensive audit logging
- Anomaly detection alerts
- Log retention (7+ years)
- SIEM integration available
Infrastructure Security
- Snowflake's secure cloud infrastructure
- Network isolation and segmentation
- DDoS protection
- Regular vulnerability scanning
- Annual penetration testing
Compliance
Meeting Industry Standards
We maintain the certifications and practices required for healthcare data.
SOC 2 Type II
Annual audit of security, availability, and confidentiality controls.
HIPAA
Full compliance with healthcare privacy and security regulations.
BAA
Business Associate Agreements available for all customers.
Pen Testing
Annual third-party penetration testing and remediation.
FAQ
Security Questions
Your data is stored in your own Snowflake account, in the cloud region of your choice. Affine code is deployed to your environment—we never extract or store your PHI.
No, we never have access to your PHI. All data remains within your own Snowflake environment.
We follow a strict incident response protocol including immediate containment, root cause analysis, and customer notification within 24 hours.
Yes, our SOC 2 Type II report is available to customers and prospects under NDA. Please contact your account executive.
Ready to Transform Your Data?
See how Affine can streamline your healthcare analytics in weeks, not quarters.
Schedule a Demo