← All FAQs
security-and-compliance
How does Burna AI handle PHI in logs?
PHI is never written to system logs. Automated PHI exposure prevention runs at the development hook layer, blocking commits that would introduce console output of patient data. Logs use non-PHI identifiers (record IDs, organisation IDs, timestamps) for operational traceability. The result is zero PHI in logs, enforced architecturally rather than by manual review.