Enterprise Architecture & SecurityOpen Beta • Not Production Ready

Compliance & Security Whitepaper

Document Ref: MH-COMP-2026-V0.4 • SOC 2, HIPAA & ISO 27001 Alignment

SOC 2 Type II Alignment

Full compliance controls for Trust Services Criteria: Security, Availability, Processing Integrity, and Confidentiality.

HIPAA BAA & Regulated Datasets

Encrypted fact stores, audit log streams, and strict Account/Scope tenant keys enable BAA execution for healthcare LLM agents.

1. Executive Summary & Open Beta Status

MemHouse v0.4 is designed for high-stakes enterprise deployments. Currently in Open Beta and not production ready, it provides a deterministic testing ground and security layer missing from standard vector databases. Through its 5-step salience pipeline and Gate A/B security filters, MemHouse guarantees that autonomous agent memory operations can be evaluated against strict regulatory criteria prior to production rollout.

2. Multi-Tenant Memory Isolation Mechanics

Unlike shared vector collections where embedding similarity can pull data from unauthorized scopes, MemHouse enforces multi-tenant row-level security (RLS) in PostgreSQL `pgvector`. Facts extracted for `Account_A / Scope_Finance` are logically impossible to query from `Account_B` or un-scoped agents.

3. Gate A & Gate B Security Enforcement

Gate A (Quality & Contamination Filter): Evaluates confidence scores, rejects hallucinated facts, and de-duplicates observations before storage.

Gate B (Blast Radius & Curation Guard): Prevents scope explosions. High-risk actions hold facts in a `Held` state awaiting explicit human approval.

4. Immutable Audit Provenance

Every memory query and fact write logs a complete, tamper-proof record detailing: Source Observation ID, Extracting LLM Model, Timestamp, Account/Scope Key, Gate Execution Result, and Lifecycle State Transition (`proposed` → `active`).

5. Request Complete Security Packet

Enterprise security teams can request our complete SOC 2 Type II audit report, third-party penetration testing results, and HIPAA Business Associate Agreement (BAA) templates by contacting compliance@memhouse.org.

Back to MemHouse Home