Security Controls
Xolvara security controls: access control with RBAC and admin email OTP 2FA, TLS 1.2+ in transit, audit logging on every PHI touchpoint, per-practice tenant isolation, PCI-isolated billing through hosted checkout. Mapped to HIPAA §164.312, SOC 2 CC6/CC7, and NIST CSF Protect.