Patient data, protected at every layer

TPN2.0 handles some of the most sensitive data in medicine. We hold it to the standards that hospital security, pharmacy, and compliance teams expect, independently audited and continuously enforced.

Request our security package

HIPAAIndependently audited

SOC 2 Type IIAudited

Encryptionat rest & in transit

Why it matters

Built to the standard clinical software demands

Clinical software sits in a uniquely sensitive place. It processes protected health information, informs decisions at the bedside, and has to satisfy hospital IT, pharmacy leadership, and compliance officers at the same time.

TPN2.0 is engineered around that reality. Security is not a checkbox we added at the end. It is designed into how data is stored, who can reach it, how the model learns, and how every access is logged. The credentials below are independently audited, not self-declared quality marks.

Certifications

The credentials that matter in healthcare

Privacy

HIPAA

✓ Audited

TPN2.0 is built and operated in compliance with HIPAA, the US law governing the privacy and security of protected health information, and our compliance is independently audited. We maintain the administrative, physical, and technical safeguards HIPAA requires, execute a Business Associate Agreement with every customer, and enforce minimum-necessary access to PHI throughout the platform.

Security & controls

SOC 2 Type II

✓ Audited

TPN2.0 has completed an independent SOC 2 Type II audit against the AICPA Trust Services Criteria for security, availability, and confidentiality. A Type II report evaluates how our controls operate over an extended window, not just how they are designed on paper. The full report is available to customers under NDA.

Your data

Handled simply, and kept where it belongs

A hospital's data belongs to the hospital. TPN2.0 uses it to serve your patients, and nothing else.

Never sent to public AI

TPN2.0 runs its own model in our own environment. Your patient data is never sent to third-party AI services such as ChatGPT or Claude.

In a secured US cloud

Everything is processed and stored inside our own secured cloud environment on Microsoft Azure, hosted in US regions. Your data does not leave the United States.

Minimal, and de-identified

We keep only the data needed to make a recommendation and to hold secure audit logs for IT and compliance, for a defined retention window, with direct identifiers removed.

409 13 St. Ste. 600 Oakland, CA 94612, USA

View the Takeoff41, Inc. Financial Conflict of Interest (FCOI) policy.