Does Neurokeys comply with HIPAA?

For clinical study participants in the U.S.: Yes. When Neurocast partners with U.S. healthcare institutions, we sign formal agreements (Business Associate Agreements) that make HIPAA's privacy, security, and breach notification rules binding on us. For all other U.S. users: Neurokeys is not a healthcare provider, so HIPAA does not formally apply. However, we build our security to meet HIPAA-equivalent standards: encryption in transit and at rest, strict access controls, audit logging, and a documented incident response plan.