View source for Notes on HCAI Security

1. Requests can only originate from [[SmartSimple]] Server and can only be triggered by [[User|user]].

2. The form data is not posted to [[External|external]] environment directly, instead a ticket with minimal information is sent (for performance consideration as well as security considerations).

3. The form data is encrypted by a private key and transmission is encrypted by [[SSL]].

4. '''NO''' privacy data is stored in [[SmartSimple]] HCAI gateway server, this server only stores ticket information and responses from HCAI.

5. A snap–shot of data sent to HCAI is always stored locally in the specific [[Instance|instance]] of [[SmartSimple]] for audit purposes.


[[Category:System Management]][[Category:HCAI]]