Skip to main content
KERNEL supports HIPAA compliance for workflows that handle protected health information (PHI), and signs a business associate agreement (BAA) on the Enterprise plan.

​
What KERNEL provides

  • A BAA. KERNEL signs a BAA with Enterprise customers. Contact sales to start one.
  • Isolation per browser. Each browser runs in its own VM with its own kernel and filesystem, isolated from other sessions at the hypervisor.
  • Zero data retention. With zero data retention, session recordings, live view streams, and telemetry aren’t retained after a browser terminates. Turn it on if PHI must not persist after a session ends.

​
What you’re responsible for

HIPAA compliance is shared. KERNEL secures the platform; you’re responsible for how your agents use it, such as which sites they access, what data they extract, and where that data goes. See the shared responsibility model for the full split, and security practices for KERNEL’s program and current compliance status.