The privacy layer
between your data
and every AI service.
SECUVA runs on-prem inside your network, anonymises clinical data before it moves, and gives you a complete governance and audit trail - all without raw PHI ever crossing your firewall.
A radiology network. Hundreds of studies per day. Blocked from their AI vendor for four months.
PHI was embedded in pixel overlays on fluoroscopy studies and in private creator tags invisible to standard export settings. Legal could not approve the transfer. SECUVA unblocked it in a day.
On-prem agent. AU control plane. Zero PHI in transit.
A split architecture where patient data and governance infrastructure never share a network path.
output
On-prem agent
Processes and anonymises data entirely inside your firewall. The agent sees raw PHI - nothing external does.
AU sovereign control plane
Policy, routing and audit managed on Australian sovereign cloud infrastructure. Patient data never flows to the control plane.
Zero-trust boundary
mTLS between agent and plane. RBAC per pipeline. Secrets management isolated from config. No lateral movement paths.
Four steps. Zero raw PHI in transit.
Connect
Drop a SECUVA agent inside your network. It speaks DICOM, HL7 v2, FHIR R4 and reads directly from PACS, EMRs, research warehouses and data lakes with minimal network configuration.
Supports Mirth Connect, Rhapsody, Orthanc, DCM4CHEE, Epic FHIR APIs and custom HTTP/S3 sources.
Anonymise
PHI is identified and removed on-prem - before anything leaves your network. Header fields, burnt-in pixel text, free-text clinical notes and structured identifiers are all in scope.
DICOM PS3.15 E.1/E.2 profiles, intelligent text de-identification, configurable retain/remove/pseudonymise per attribute.
Govern
Policy rules decide what leaves your perimeter, where it goes, and which approved AI service or researcher is allowed to receive it. Every routing decision is enforced - not just logged.
Attribute-level access control, data-use agreements enforced at runtime, destination allowlisting, expiry policies.
Audit
Every transformation, every routing decision and every recipient access is cryptographically signed, timestamped and stored in an immutable log - exportable for OAIC, TGA and HREC review.
Tamper-evident audit chain, automated compliance reports, HREC submission exports, real-time alerting on policy violations.
Everything you need to govern clinical data at scale.
On-prem anonymisation engine
De-identification runs entirely inside your firewall. SECUVA agents process DICOM, HL7/FHIR and free-text data in-place - raw PHI is never serialised to an external network call, never written to shared storage, never visible to a cloud endpoint.
Australian data residency
Control plane on Australian sovereign cloud. Your data plane stays on your own infrastructure. No patient data ever touches a server outside Australia.
Pipeline orchestration
Build policy-driven pipelines connecting PACS, EMRs, research stores and AI vendors. Each pipeline has its own profile, routing rules and audit context.
Immutable governance log
Every transformation cryptographically signed and chained. Logs exportable in standard formats for OAIC submissions, ethics committees, and governance boards.
Zero-trust security
Mutual TLS between agent and control plane, RBAC with per-pipeline roles, secrets management isolated - no credentials in config files, no lateral movement paths.
One platform. Every clinical data type.
Same agent, same audit trail, same governance model - regardless of modality.
Built for the Australian
regulatory environment.
SECUVA is designed from the ground up around Australian healthcare law and regulatory expectations - not retrofitted from a US or EU baseline.
The Privacy Act, OAIC guidance, TGA SaMD framework, and standards like DICOM PS3.15 and HL7 FHIR are not checklist items - they are the engineering brief every product decision is measured against.
Fits into the stack you already run.
No rip-and-replace. No middleware rewrites. SECUVA connects via standard protocols.
- Orthanc
- DCM4CHEE
- Sectra IDS7
- Intelerad
- Nuance PowerScribe
- Fujifilm Synapse
- Epic (FHIR R4)
- Cerner / Oracle Health
- MedTech Evolution
- Genie
- Best Practice
- HL7 v2 brokers
- REDCap
- AWS S3 / HealthLake
- Azure Health Data
- Google Cloud Healthcare API
- XNAT
- Custom connectors
- Annalise.ai
- Harrison.ai
- Aidoc
- Nuance DAX
- Custom model APIs
- Your internal models
Don't see your system? Talk to us - we support custom connectors →
See it running in your environment.
Show us your PACS, EMR and AI vendor setup. We will walk through exactly where SECUVA fits, what the agent deployment looks like, and what changes from day one.