sycana AI is HIPAA-ready referral infrastructure for IT and security teams.
Browser-based access with role-based controls, PHI redaction, and a complete audit trail. No on-prem install required.
Is sycana AI HIPAA-compliant and safe to deploy?
sycana AI is designed for clinics that need a HIPAA-ready referral layer without building on-prem infrastructure. It runs in US cloud infrastructure, encrypts data with AES-256 at rest and TLS 1.2+ in transit, scopes access by role, and retains audit logs for seven years. A BAA is signed before any PHI is processed. If your organization requires all software to run inside your own data center, this deployment model will not fit. Security review materials are available before you commit.
Simplified Deployment Model
Legacy HL7 Interface
sycana AI API Model
Built for your security review.
Role-Based Data Scoping
Four data scopes (clinical full, clinical lite, scheduling, and operational), each with automatic PHI redaction. Staff only see what their role requires.
Complete Audit Trail
Every action is logged with actor, role, timestamp, and IP. Audit logs are preserved with tamper-evident hash chaining and 7-year retention for HIPAA compliance.
Epic SMART on FHIR + EHR Adapters
Native OAuth 2.0 integration with Epic (SMART on FHIR), plus structured exports and selected vendor-specific integrations where configured. No VPN tunnels, no Mirth Connect, no HL7 pipes.
Processing Reliability
Failed jobs land in a dead letter queue with automatic retry tracking. No referral is silently dropped.
Automated Onboarding
New practices are onboarded with NPI validation via the NPPES registry, service matrix configuration, and fax line provisioning. Implementation timeline depends on EHR and security review.
SMS Compliance
Patient SMS includes opt-out tracking, idempotent delivery, and per-practice template controls. Messaging is activated per-tenant during configuration.
Offline PHI redaction tool — coming soon
Sycana DeID is a desktop tool for IT and compliance teams. Runs locally, no document content leaves your machine. Full release coming soon.
Learn about Sycana DeID →Ready for your security review.
Request our security packet including architecture diagrams, HIPAA compliance documentation, and audit trail samples.