Private AI and security
AI that does the reading. People who make the calls.
ComplianceAX uses AI to save you hours of reading, under strict rules about where it runs, what it may say and what it may never decide.
How our AI behaves
Six rules the AI always follows.
Rule 1
Private models, secure data centers
Every AI model in ComplianceAX runs privately in secure data centers. Your documents and patient data are not sent to OpenAI, Google or any other public AI service.
Rule 2
Cite or stay silent
AI may suggest an answer only when it can quote your own document word for word. The quote is checked by software against the source before you see it. No supporting sentence, no suggestion.
Rule 3
You accept every answer
Suggestions are clearly marked and count for nothing until a person on your team accepts them, one at a time.
Rule 4
It never makes the big calls
AI does not calculate your score, declare you compliant, sign an attestation or decide whether an incident is a breach. People do.
Rule 5
Help, not legal advice
The assistant on each question explains what it means and what counts as proof, with numbered sources. It never answers for you and never gives legal advice.
Rule 6
Everything is audited
Every AI suggestion, and what your team did with it, is recorded in the audit log.
See it in action
Every suggestion shows its source.
When ComplianceAX suggests an answer, you see the exact sentence it came from and the document and page it's on. Accept it, change it or ignore it.
Is patient data on laptops and other portable devices encrypted?
"All laptops and mobile devices that store ePHI use full-disk encryption managed by our IT provider."Device and Media Policy.pdf, page 2
Not counted until someone on your team accepts it.
Security
Built for data you can't afford to lose.
Separate by design
Database row-level security keeps each organization's records isolated from every other organization's.
Passwordless sign-in
Sign in with a secure one-time email link. There are no passwords to reuse or steal.
Two-step verification
Required for owners, admins and Privacy and Security Officials.
Automatic sign-out
Sessions end after 15 minutes without activity.
Tamper-evident audit log
An append-only, hash-chained record of who did what, and when.
Evidence that stays put
Proof attached to an answer stays with it, so your record holds up as of any date.
See ComplianceAX with your own practice in mind.
Request a 30-minute demo with Southeastern Technical. We'll walk through the assessment, the document head start and what a complete program record looks like.