Security and control
Civaren products are designed with explicit boundaries, access controls, auditability, and clear system state. Security claims should describe the controls that actually exist.
Civaren's current web and Recover infrastructure is hosted on AWS. Public website content is isolated from authenticated product workloads.
Recover's design uses private healthcare-data intake, encryption, sanitization workflows, access controls, and separation between raw PHI and de-identified downstream workflows.
Live, simulated, pending-review, disconnected, active, and canceled states should be visible where they affect a user's understanding or decision.
Healthcare posture
Civaren does not use blanket HIPAA-compliance marketing claims as a substitute for the contractual, technical, and organizational work required to handle PHI appropriately.
Production use involving identifiable health information requires the relevant agreements, eligible services, configuration, access controls, procedures, and operational review to be in place.
Use the contact form for security documentation, architecture questions, or enterprise review requests. Do not submit PHI or other sensitive production data through the public site.
Contact Civaren