Trust & Security
Honest status for every dependency HearthSafe relies on. We update this page as milestones clear — no marketing badges, no vanity indicators.
Engineering guarantees
RLS policies are installed and every API route is context-bound by the no-bare-prisma gate. Production FORCE RLS remains a gated database flip after the FORCE-on harness/staging run.
Every visit, receipt, and report event is hash-chained. Each certified export carries a public, PHI-free verifier you can call yourself — see the verifier section below.
17 guarded patterns block diagnostic claims, medication recommendations, and prognosis language. Jailbreak suite passes at launch.
Verified by Codex 6-vector adversarial pass on launch. Re-verified on each deploy.
Paperwork in progress
Type II observation period in progress. Controls inventory complete. Report expected ~Q4 2026. Badge upgrades from 'In observation' to 'Type II' when report is issued.
Filed with carriers. Approval expected Weeks 4–6 post-launch. Email + push notifications are live today; SMS cascade activates on approval.
DRAFT — attorney review in progress. Template generates with 'DRAFT — not legal advice' watermark until Arizona attorney sign-off.
DRAFT — attorney review in progress. Template generates with 'DRAFT — not legal advice' watermark until Texas attorney sign-off.
DRAFT — attorney review in progress. Template generates with 'DRAFT — not legal advice' watermark until California attorney sign-off.
DRAFT — attorney review in progress. Template generates with 'DRAFT — not legal advice' watermark until New York attorney sign-off.
DRAFT — attorney review in progress. Template generates with 'DRAFT — not legal advice' watermark until Florida attorney sign-off.
In Apple review. PWA works on any mobile browser today. Native iOS app ships to TestFlight on approval.
In App Store review. PWA covers Day 1 mobile. Native app ships on approval (estimated 1–2 weeks from submission).
In-progress items have workarounds in place (DRAFT watermarks, email + push instead of SMS, PWA instead of native app). Each clears on its own timeline and this page updates automatically on redeploy.
Infrastructure
Provisioning — status page setup in progress. See docs/operations/launch-pack/status-page-setup.md. Update this entry and redeploy once the URL is live.
Verify the audit chain yourself
Every certified export carries a SHA-256 hash-chain proof. The public verifier takes an export ID and confirms the chain is intact over that export's date range — no login required, and the response contains no PHI.
curl https://www.hearthsafe.health/api/exports/<export-id>/verify
A valid chain returns {"valid":true,"rootHash":"…","anchoredAt":"…","breakReason":null}. A tampered chain returns {"valid":false,"breakReason":"…"}. The endpoint returns 200 in both cases to avoid timing attacks.
Questions about our security posture? hello@hearthsafe.care