Concurrence has completed its HITRUST e1 assessment, is SOC 2 Type II audited, and is independently assessed against the HIPAA Security and Breach Notification Rules. Data is encrypted at rest and in transit. Our standard DPA prohibits AI training with customer data. PHI processing requires an executed BAA and the required security configuration. Assessment scope, hosting, and AI processing locations must be reviewed for your selected deployment, model, and provider.

Our agents are designed with conservative fallback behaviors. When encountering unfamiliar scenarios, they gracefully escalate to human clinicians rather than attempting to handle situations outside their training. All edge cases are logged for review and continuous improvement.

Yes, our platform supports real-time behavior adjustments through our governance tools. You can update clinical guidelines, modify response templates, and adjust escalation thresholds without requiring full model retraining.

We guarantee 99.9% uptime with a comprehensive disaster recovery plan. Our infrastructure is deployed across multiple availability zones with automatic failover. We conduct regular disaster recovery drills and maintain detailed runbooks for all failure scenarios.

Our agents use a multi-tier memory architecture that maintains both session context and longitudinal patient history. This ensures continuity of care across interactions while respecting data retention policies and patient privacy preferences.