Trust posture

Care that holds requires trust that holds. Here's how we earn it.

Auditable infrastructure. Public posture, private mechanics.

Trust stack

Validated without overexposure.

Controls, reviewability, no PHI in evidence.

Selected control
HIPAA posture

BAA and infrastructure controls.

Before
54%
exposure
to
After
58%
review strength
Active today

Signed, deployed, and verifiable.

HIPAA posture
AWS BAAActive · signed 2026-05-19
KMS at restAll tiers
Private networkNo public DB access
SecretsEncrypted, KMS-managed
Backups7-day automated
Audit chain
Spec versionv2.0.1
Spec hash0xdbfe4ea8…
Live batches3 anchored
Events verified225 total
Verifierauthorized review
Pilot anchor
InstitutionUPenn Psychiatry
Start dateNot yet set
Faculty PILily Brown, PhD
StatesCO · TX · OH · FL · PA
IRBIn review
Engineering chain of custody
Codebase accessSole principal
First hireNDA + IP + vesting
Trade secret docsIn progress
In progress · funded by Seed

Seed-funded readiness path.

Certifications
  • SOC 2 Type 1Q2 2027
  • SOC 2 Type 2Q4 2027
  • HITRUST CSF self-assessment2027
  • HITRUST validation2028
Validations
  • Third-party pen testQ1 2027
  • External code reviewQ2 2027
  • Bug bounty programQ3 2027
Regulatory & legal
  • Patient disclosure templatesIn review
  • State attorney networkBuilding
  • Enterprise BAAsAs contracts close
Structural commitments

Three commitments. Built in.

Independent verification.

Independent review without PHI.

Patent perimeter plus trade secret interior.

Patent filings outside. Trade secrets inside.

Sole-principal access during the founding phase.

Controlled codebase access. NDA/IP controls as we grow.

Verification docs yourself

The fastest way to trust SmartConsent is to verify it.

Export evidence. Verify without PHI or private access.

verification package 
$ ayra-verify ./evidence/batch-249.json --spec v2.0.1

✓ Evidence package valid
✓ No PHI required
✓ Independent review ready
✓ Receipt found
✓ All 123 events verified
Review verification docs