hipaa

Deep HIPAA Security Rule technical audit mapping code-level findings to 45 CFR sections. Covers administrative safeguards (164.308 -- risk analysis, workforce security, access management, incident procedures, contingency planning), physical safeguards (164.310 -- facility access, workstation security, session timeout, device controls, crypto-shredding), and technical safeguards (164.312 -- unique user IDs, emergency break-glass access, automatic logoff, AES-256 PHI encryption, audit controls with 6-year retention, data integrity checksums, MFA authentication, TLS transmission security, network segmentation). Traces PHI data flows through ingestion, processing, caching, storage, transmission, and disposal. Use when building or auditing healthcare apps, EHR integrations, FHIR APIs, telehealth platforms, or any system handling protected health information.