Skip to content
CogniAxis AI home

The Intelligence Layer Surgery Runs On.

AUNIVLABScompany (opens univlabs.in in a new tab)

Platform · Security & governance

Clinical Media Governance, Built Into the Workflow.

Surgical video and workflow data need governance from the first recording. AXIS Compliance brings privacy, permission, consent, audit and retention controls into every compatible AXIS product.

Controls

How governance is designed in

Controls are described as they are designed. Where a control is marked 'where verified', its implemented scope is confirmed for each deployment.

  • Role-based access

    Roles define who can view, guide, annotate, record, review, download, export or share surgical content, following minimum-access principles.

  • Session permissions and consent references

    Streaming, recording, teaching, mentoring and sharing follow hospital consent policy and applicable law. Workflows are designed to reference consent, not replace it.

  • Encryption

    Encryption in transit and at rest where verified for each deployment. The implemented scope is documented during procurement.

  • Audit trails

    Audit logging of access and actions on clinical media is designed into the platform, with scope confirmed per release.

  • Retention, export and deletion

    Retention periods, export and deletion are configured to institutional policy.

  • De-identification

    De-identification workflows for teaching and research use. These are reviewed workflows, not guarantees of anonymity.

  • Deployment choice and tenancy

    On-premises, private cloud or hybrid deployment, with institution and tenant boundaries in AXIS SurgiVault.

  • Secure lifecycle and incident response

    Secure software development and incident-response processes. Details are shared with institutions during security review.

Privacy, standards and assessments

What we state, and what we don't

We separate certifications, standards implementation, integration testing and plans. We do not describe the platform as certified or universally compliant.

DPDP Act

Status: In progress

Privacy and governance controls designed to support institutions' obligations under India's Digital Personal Data Protection Act and applicable rules. Fiduciary and processor roles depend on each contract and deployment.

Scope: AXIS Compliance controls

Independent security testing

Status: In progress

Independent security testing status is shared privately with institutions during procurement.

Scope: Platform

CDSCO / SaMD

Status: Statement

No regulatory approval or classification is claimed for any AXIS product.

Scope: All products

Hospital and partner logos

Status: Statement

Institution names, logos and case studies are published only with written permission.

Scope: Website

Clinical responsibility

Clear lines of responsibility

  • AXIS CSM supports collaboration, training, documentation and review. It does not replace the operating surgeon's judgment.
  • Remote mentors provide authorized guidance, while the operating surgeon and clinical team remain responsible for patient care.
  • Original recordings should be preserved when edited versions are created for teaching, training or sharing.
  • Temporary access, external mentor access, video sharing, downloads and exports should be reviewed regularly.
  • AI-assisted outputs are review aids. Users verify generated content before clinical, teaching, reporting or distribution use.

Request our security documentation

Security, privacy and deployment documentation is shared with institutions during evaluation and procurement.

Talk to Our TeamHealthcare interoperability