Security & compliance you can hand to your auditor
IHS Flow is operated by Infotech Houston Solutions, a healthcare-focused managed IT and security provider with HIPAA and SOC 2 Type II accreditation. Your agents run on our infrastructure, under our controls, managed by our engineers.
How we protect your data and your agents
Owned Infrastructure
IHS Flow runs on IHS-owned racks in Houston and Dallas datacenters, on IHS’s own IP network — not a shared SaaS multi-hop chain.
Hardened Edge
Web traffic is proxied and filtered at the edge; the origin accepts connections only from the proxy. Voice signaling is restricted to approved addresses.
Encryption
TLS in transit end-to-end; transcripts, credentials and troubleshooting screenshots encrypted at rest.
Strong Authentication
MFA for every user — authenticator app or one-time email codes — with remembered-device limits and session controls.
Tenant Isolation
Every client is a separate tenant; lists, data, users, keys and logs are scoped so staff only see what they are assigned.
Audit Logging
Sign-ins, configuration changes, agent actions and data access are recorded and available for your reviews.
Secrets Management
System passwords and API tokens are stored encrypted and never exposed to AI models or end users.
Patching & Backups
Managed OS patching, security updates, nightly backups and backups before every platform change.
24/7 Monitoring
Server health, service checks and alert rules watched by the IHS operations team.
AI that’s accountable
Automation should never mean less oversight. IHS Flow is designed so a person can always see what an agent did, why, and change it.
- PHI workloads use AI model and speech providers under BAA / zero-retention terms
- Your data is not used to train public AI models
- Agents only act within the tools and permissions you approve
- Assisted mode and approval gates for sensitive decisions
- Platform changes go through IHS change control and engineer review
- Call recordings off by default; encrypted transcripts instead
| Control area | IHS Flow |
|---|---|
| Hosting | IHS racks · Houston & Dallas |
| Accreditation | HIPAA · SOC 2 Type II |
| BAA | Yes, for covered entities |
| User sign-in | Password + MFA |
| Access model | Role-based, per client |
| Logs | Full audit trail |
| SPF · DKIM · DMARC | |
| Support | IHS engineers, Houston |
Documentation available on request
Under NDA we can share our SOC 2 Type II report, BAA template, security policies, data-flow diagrams for your workflows, and completed security questionnaires.
Ready to put AI agents to work?
Book a free workflow analysis. We’ll map your processes, identify what AI can take over, and show you the time and cost you can recover — before you commit to anything.