Security
Authentication & access controls
Passkeys & Security Keys
Manage WebAuthn/FIDO2 credentials
Session
Session Timeout5 minutes (HIPAA)
EncryptionAES-256-GCM
Rate Limiting5 attempts / 15-min lockout
Audit LoggingHMAC-SHA256 Chain
HIPAA Compliance
Guardian Orb implements all required HIPAA security safeguards including encryption at rest (AES-256-GCM), encryption in transit (TLS 1.3), automatic session timeout, multi-factor authentication, and tamper-proof audit logging per 45 CFR 164.312.