Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

TEFCA compliance for digital health companies: a guide to identity proofing

In 1996, the US signed the Health Insurance Portability and Accountability Act (HIPAA) into law. One of the government’s chief goals was to safeguard sensitive patient data and protected health information (PHI) from unauthorized disclosure. While these protections were critical, HIPAA compliance requirements (alongside an already-fragmented electronic health record systems) have led to ongoing data silos across healthcare.

Introducing early access for Case Review Agents: AI decisioning for high-stakes identity decisions

Every day, your review team makes hundreds of decisions that determine who gets access to your platform. These decisions carry a lot of weight. Get them right, and you protect your business while delivering a seamless user experience. Get them wrong, and you either block legitimate users or open the door to fraud. As your business scales, these decisions get harder to manage. Case volume climbs, fraud tactics shift, and regulatory expectations evolve.

The DEA telehealth extension: how to prepare for new patient identity verification requirements

On December 31, 2025, the DEA issued its fourth temporary extension of the COVID-era telemedicine flexibilities, keeping the current rules in place through December 31, 2026. For telehealth companies prescribing controlled substances, the extension was welcome news.

Partnering with Chainlink to bring reusable identity to on-chain finance

Every day, financial institutions move trillions of dollars on-chain. From tokenizing money market funds to settling trades on private blockchains, financial institutions are swiftly bringing capital on-chain. But the infrastructure for compliance hasn't kept up. It’s not uncommon for investors to verify for KYC multiple times just to trade across chains.