Security & Compliance
Transparent, secure solutions for privacy-centric organizations.
Security & Compliance
Transparent, secure solutions for privacy-centric organizations.
Product
Privacy-focused SaaS utilizing the latest in data security for healthcare compliance.
Canary is backed by a team of experts working tirelessly to maintain data security – from our development lifecycle, to continuous monitoring of our infrastructure and applications. Our technology is HIPAA-compliant and offers fully anonymous solutions. All research data collected through our API is de-identified in the analysis environment, ensuring complete user protection.
Infrastructure
Built on industry-leading cloud platforms to ensure we’re always at the front of the pack.
We exclusively work with leading cloud partners who adhere to assurance programs including, but not limited to: SOC 1/ISAE 3402, SOC 2, SOC 3; FISMA, DIACAP, and FedRAMP; ISO 9001, ISO 27001, ISO 27017, ISO 27018. Environments are routinely audited, with certifications from accreditation bodies across geographies and verticals. Our technology is CIS Control Audited, vulnerability scanned, and has cleared all API penetration testing.
Data Security
Rigorously audited to ensure our systems architecture stays best-in-class.
Canary maintains robust data security procedures. We’re continually analyzing and updating our systems to implement the most secure data protections available. Staying up to date with the latest data protections is important to us. We verify our systems architecture, controls, and procedures annually through third party audits and penetration testing. All data is encrypted in transit with TLS 1.2 encryption, and at rest with AES-256 encryption.
Canary Speech is committed to maintaining the highest standards of data security and ethical AI practices. We provide a confidential and anonymous channel for anyone to report concerns regarding our handling of data or the impact of our AI systems. You may submit a report here. All reports are taken seriously and reviewed by our compliance team.
The Coalition for Health AI (CHAI)’s mission is to establish guidelines and frameworks that help healthcare organizations navigate AI safely and confidently. By uniting health systems, academic institutions, industry leaders, and policymakers, CHAI sets a bar for what “responsible AI” should look like in practice.
Joining CHAI aligns directly with Canary Speech’s mission: to deliver objective, non-invasive healthcare screening to every patient who needs it, everywhere. This mission requires more than breakthrough science—it requires unwavering responsibility in how that science is created, tested, and delivered.
Our participation in CHAI reinforces several commitments:
Transparency: Clear methodologies, evidence-based validation, and clinically grounded models that health systems can rely on.
Accountability: Ongoing evaluation, continuous improvement, and thoughtful deployment aligned with CHAI’s principles.
Fairness and Trust: A commitment to equitable, bias-aware AI designed to support every patient, regardless of background, condition, or environment.
Being a CHAI member provides an additional layer of assurance to our customers and partners. It signals that:
Our technology is developed and deployed in alignment with national recommendations for trustworthy healthcare AI.
We actively contribute to the development of best practices that help shape the future of responsible clinical technology.
We stand alongside leading health systems and innovators that prioritize safety, transparency, and integrity.
In short, CHAI membership is both a responsibility and a promise: our solutions will continue to meet the highest standards of trust that healthcare deserves.