Glossary
Encryption at rest
Protection of stored PHI on disk.
Encryption at rest protects PHI stored on vendor infrastructure — audio recordings, transcripts, generated notes, and derived analytics. AES-256 is the accepted standard. Ask whether the vendor holds the keys or uses a managed KMS with per-tenant keys.