DEMO

You’re viewing AuditPilot with seeded data for Cedar Creek Family Medicine. Add Clerk + Neon environment variables to enable real multi-tenant data.

Compliance engine

Controls

27 canonical controls mapped across 4 frameworks. Currently 72% compliant.

Status

Framework

Access Control

1 of 4

Multi-factor authentication enforced for all users

Every user with access to PHI or production systems must authenticate with a second factor (TOTP, push, or hardware token).

1 of 4

Full-disk encryption on all workstations

Every laptop, desktop, and tablet that touches PHI has full-disk encryption (BitLocker on Windows, FileVault on macOS).

1 of 2

BAA on file for every vendor handling PHI

Every third-party that creates, receives, maintains, or transmits PHI on the clinic's behalf has a current, signed Business Associate Agreement.