We made an open-source DICOM viewer HIPAA-compliant — here's how

Body:

Open-source medical imaging tools have zero security. No access control, no audit logs, no encryption at rest.

HIPAA Vault adds a compliance layer to OHIF Viewer: AES-256-GCM encryption, RBAC access control, full audit trail, BAA-ready logging, and PHI auto-masking.

┌────────────────┬───────────┬─────────────┐

│ Capability │ Before │ After │

├────────────────┼───────────┼─────────────┤

│ Encryption │ None │ AES-256-GCM │

├────────────────┼───────────┼─────────────┤

│ Access control │ None │ RBAC │

├────────────────┼───────────┼─────────────┤

│ Audit │ None │ Full trail │

├────────────────┼───────────┼─────────────┤

│ BAA │ Not ready │ Documented │

└────────────────┴───────────┴─────────────┘

25 encryption tests passing. MIT licensed.

Contact: [e-mail]