Trust Center
Security & Data Safety
ClinicalPearls helps clinicians preserve what they learn and evaluate clinical AI — with de-identification by the physician and isolation of every Dossier by design.
Compliance
SOC 2 Type II infrastructure
Held by our hosting providers
HIPAA Safe Harbor workflow
18-identifier physician attestation
Resources
Available on request for partners and health systems.
Controls
Continuously monitoredInfrastructure security
- Encryption in transit (TLS)
- Encryption at rest for database and file storage
- Managed cloud hosting on audited data centers
- Continuous database backups
Data isolation
- Row-level security on every user table
- Dossier content readable only by its owner
- Authenticated, token-verified server requests
- Leaked-password protection enabled
De-identification & privacy
- 18-identifier HIPAA Safe Harbor checklist
- Explicit physician attestation before save
- Automated identifier scrub as a safety net
- Evaluator identities removed from lab exports
Access & operations
- Role-based admin access via protected role table
- Least-privilege production access
- Periodic automated security scans
- User-initiated deletion of pearls, cases, papers
Subprocessors
Amazon Web Services • Database, compute and storage hosting
Cloudflare • Edge hosting, TLS and DDoS protection
OpenAI • Speech transcription, embeddings and case structuring
Perplexity • Literature retrieval and reference suggestions
Google model APIs • Structuring and summarising de-identified text
Google Workspace • Support email
FAQ
Is ClinicalPearls SOC 2 certified?
Our hosting infrastructure providers hold SOC 2 Type II and ISO 27001 reports. ClinicalPearls itself has not yet completed an independent SOC 2 audit.
Do you store protected health information?
The platform is designed so cases are de-identified before they are saved. Physicians review every case against the 18 HIPAA Safe Harbor identifiers and confirm none remain; an automated scrub runs as a backstop.
Who can see my Dossier?
Only you. Row-level security restricts your pearls, cases, transcripts and papers to your account.
Can I delete my data?
Yes. Delete items from your Dossier at any time, or email support to delete your account and its content.
Updates
Physician-attested de-identification
PrivacyPilot release, 2026
Every dictated case now requires review against all 18 HIPAA Safe Harbor identifiers and an explicit confirmation before it can be saved.
Security inquiries: support@clinicalpearls.ai. See also our Privacy Policy and Pilot Terms.