End-to-end encryption
All patient data is encrypted at rest using AES-256 and in transit using TLS 1.3. Encryption keys are managed via a dedicated key management service with automatic rotation.
Security & compliancePatient data you can trust.
Patient data you can trust.
Infrastructure you can rely on.
Healthcare data carries the highest responsibility. Lucent Health was built from the ground up for the security, privacy, and compliance requirements of Australian clinical practice.
SOC 2 Type IIISO 27001APA 1988
Core security controlsFour pillars
Role-based access control
Every user sees only what their role permits. Practitioners access only their assigned patients. Admins control permissions. No cross-role data leakage by design.
Complete audit trails
Every read, write, and delete is logged with timestamp and user identity. Immutable audit logs are retained for 7 years, meeting Australian health record requirements.
Australian data residency
All patient data is stored on servers located within Australia. We do not transfer health information outside Australian jurisdiction without explicit consent.
Compliance framework
Aligned with Australian and international healthcare standards.
Australian Privacy Act 1988
Full compliance with the Privacy Act and Australian Privacy Principles (APPs), including sensitive health information handling requirements under APP 3 and APP 6.
Healthcare Identifiers Act 2010
Infrastructure is designed to support integration with Australia's national health identifier system and My Health Record framework.
AHPRA practitioner standards
Clinical communication, record-keeping, and telehealth features align with AHPRA guidelines for registered health practitioners.
SOC 2 Type II
Our infrastructure and security controls are independently audited against SOC 2 Type II criteria for security, availability, and confidentiality.
ISO 27001
Information security management system certified to ISO/IEC 27001:2022, covering risk management, asset control, and incident response.
HIPAA-ready
For clinics operating across jurisdictions, Lucent Health supports HIPAA-compatible BAA agreements and controls for US-market deployments.
InfrastructureReliability
- Uptime SLA
- 99.9%
- Data backups
- Hourly
- Backup retention
- 90 days
- Incident response
- < 1 hr
- Penetration testing
- Biannual
- Vulnerability program
- Public
Responsible disclosure
Report a vulnerability
Public program. Researchers who identify vulnerabilities in good faith are recognised and rewarded.
security@lucenthealth.com.auSecurity documentation
Get the full pack
Clinic administrators and enterprise customers can request our full documentation package, including pen-test reports and SOC 2 summary.
Request documentationHave security questions?
Talk to our security team.
We’re happy to answer questions from clinic IT, legal, or compliance teams before you sign.
Privacy, residency, AI training questions covered on the FAQ.