BAA on Team and above. Technical safeguards mapped to 45 CFR 164.312. HIPAA-eligible AWS services only for PHI.
Relay sees ciphertext only. Session keys negotiated client-to- client. KMS-backed at rest. FIPS 140-2 validated crypto modules on request.
No collisions with Epic, Cerner or Athenahealth presence detection. Smart-card readers passed through. Auditor-readable session timeline.
Built for the clinical IT reality
Healthcare IT is not enterprise IT. The endpoint is in a busy clinical area, the user is mid-care, and the failure mode is somebody not getting the medication they need. Silux Connect was designed with that priority order in mind. Our agent is the lightest weight we could ship — under 18 MB of resident memory, no permanent UI presence, no toast notifications interrupting clinical workflows. A clinician hands a session to a technician and gets on with their day; the technician sees what they need to see for as long as policy allows, then disconnects without trace.
For the IT leadership, the artefacts are what auditors ask for: tamper-evident audit logs, optional session recordings saved on your own computers (never on ours), per-clinician access reviews, just-in-time elevation for sensitive systems, and an MFA story that includes smart cards, FIDO2 keys, push-approval and biometric on supported endpoints. Our HIPAA control matrix maps each technical safeguard to the relevant section of 45 CFR 164, with evidence URLs you can forward to your auditor.
For the MSPs and managed-IT teams who serve healthcare clients, the sub-BAA chain is documented and traceable. We sign a BAA with you; you sign a sub-BAA with your covered-entity client; we supply the upstream BAA on request so your client's auditor can verify the chain. Multi-tenant white-label means your clinical clients see your brand and your support number, not ours.
For telehealth providers, Silux Connect supports your clinical-IT and back-office workflows — workstation support for clinicians, medical device management, conferencing-equipment health checks. We don't replace your patient-visit video platform; we make sure the platform is healthy when the patient logs in.
Riverside replaced TeamViewer and a separate MDM vendor with Silux Connect across 23 clinics, 1,400 endpoints and 84 clinical- IT technicians. The before-state was a $182,000-per-year licence spend plus a four-week ticket-resolution time for endpoint issues, with no audit-trail evidence the privacy office could forward to a regulator. The after-state is a $94,000-per-year licence spend (48% reduction), a 38-hour median ticket resolution time, and a session-audit pipeline the privacy office uses directly as evidence for HIPAA documentation requirements. the AI assistant's automated triage closes 41% of Tier-1 tickets before a human technician sees them.
Case-study draft. Customer review pending — illustrative figures only until the published reference is approved.
Frequently asked
Yes. Available on Team ($19/month) and above. Self-service DocuSign envelope from our /hipaa page; countersigned within one business day. Wet-signed PDF is also available.
During a live session the relay sees ciphertext only. PHI is visible to your technician on their screen because they are operating the patient-care endpoint, which is by design. Optional session recordings are saved as a file on the technician's own computer — Silux never receives or stores them.
Yes. Many of our healthcare customers run Silux Connect alongside Doxy.me, Zoom Healthcare or their EHR's built-in tele-visit. Silux supports clinical-staff IT (workstation support, clinician device management); we do not replace the patient-visit video tool.
Our agent is designed not to collide with EHR presence detection — no fake user input, no synthetic mouse, no interference with smart-card readers. Your clinicians can hand a session to a technician without losing their EHR session or triggering an audit-event alert.
HITRUST CSF v11 control mapping is documented and available to qualifying customers under NDA. A full HITRUST certification is on the late-2026 roadmap. SOC 2 Type II observation is in progress today.