Encryption
To comply with the HIPAA Security Rule “Technical Safeguards” PII data Must be Encrypted. This means Encryption at Rest and Encryption in Transit.
In the US this must be done according to NIST / FIPS standards, but other jurisdictions may have different requirements.
Different Organizations may also have different rules or guidelines for Encryption. Some could be fine with SafeCDx managing their encryption keys, whereas others prefer bringing their own keys. They may also have a different preference for key-lengths, what ciphers to use, what key sources to use, or when to rotate.
The Encryption System makes sure that encryption works for your Organization the way you want it to work.
Features
Configuration
Configure algorithms, and key sizes, and key sources.
Management
Manages keys and key rotation.
