Trust through clarity,
not buzzwords.

Encryption

Patient-related data is scrambled into unreadable form while it travels over the internet (HTTPS in production) and while it sits in storage on the server. Without the encryption key, intercepted or stolen files should not be readable as ordinary text.

Passwords are never stored as typed. They are stored only as a one-way hash so the original password cannot be recovered from the database.

Access control

You must sign in as yourself. Each doctor sees their own patient list and notes. Another doctor's records are not shown unless a deliberate sharing model is added later. That rule is enforced in the application, not only in the interface.

Consent and responsibility

KAMS is documentation support for licensed clinicians. It does not replace clinical judgment. You review and accept every note before it is used for care or placed in a chart.

Do not process information you are not authorized to handle in this environment. Microphone capture stays on the device until you generate a note; the transcript is then sent for structuring.

What we do not claim (yet)

We do not claim HIPAA certification, ISO audits, or other formal compliance badges on this page unless they have been completed and verified. If you need a formal security questionnaire for a clinic deployment, use the contact form and we will respond with what is actually in place.