Loading...
Heimdall protects PHI access and detects insider threats across your clinical and administrative systems. Ragnarok scans ePHI-adjacent systems weekly — patient portals, telehealth APIs, third-party integrations — and generates the HIPAA Technical Safeguard evidence your compliance team needs. Together they satisfy HIPAA Administrative, Physical, and Technical Safeguard requirements; PIPEDA breach notification obligations; and PHIPA audit log mandates without manual reporting overhead.
Heimdall watches every access to PHI-bearing systems — EHRs, clinical databases, imaging systems — and baselines normal behaviour per user role. Anomalous access patterns trigger automated containment, not just an alert. HIPAA Administrative Safeguard §164.308 and PHIPA s.12 audit log requirements are satisfied automatically.
Ragnarok runs scheduled penetration tests against systems that touch or border your ePHI environment — patient portals, telehealth APIs, DICOM gateways, third-party integrations. Each scan produces HIPAA Technical Safeguard §164.312 evidence and a prioritised fix list. New systems are discovered and added to scope automatically.
HIPAA requires covered entities to implement, review, and document safeguards on an ongoing basis. Heimdall generates the monitoring logs; Ragnarok generates the testing records. Together they produce a continuous evidence trail that satisfies OCR audit requirements and PHIPA breach reporting timelines without manual collation.
Walk through how Heimdall and Ragnarok are pre-configured for HIPAA safeguard requirements and PHIPA audit obligations. We map to your specific environment.
See how it works