Industry Template Industry-Specific

Healthcare (US — HIPAA)

Purpose-built for US healthcare organizations subject to HIPAA. Enforces PHI detection and redaction, minimum-necessary access controls, BAA-ready logging, and clinical safety guardrails. Covers the Privacy Rule, Security Rule, HITECH Act, 42 CFR Part 2, and ONC Cures Act requirements.

Regions

US

Regulations

7 covered

Control Domains

5 domains

Deployment

Regulated SaaS, Clinical Zero-Retention

Regulations & Standards

HIPAA Privacy Rule HIPAA Security Rule HITECH Act 42 CFR Part 2 FDA SaMD CMS Interoperability ONC Cures Act

Control Domains

Phi Protection
Access Control
Audit Logging
Clinical Safety
Data Loss Prevention

Deployment Options

Regulated SaaS
Clinical Zero-Retention

Get started in 3 steps

1

Explore the template

Click "Explore in Console" to open this template in the Keeptrusts configuration editor.

2

Customize policies

Adjust detection thresholds, escalation rules, and redaction patterns to match your requirements.

3

Deploy to your gateway

Save your configuration and deploy it to any Keeptrusts gateway — cloud, on-prem, or air-gapped.