Skip to main content

​
Overview

Specode includes a built-in HIPAA Compliance Agent that scans your codebase for potential HIPAA violations - no setup required. Run it on demand from the Compliance Center inside the AI Coder whenever you want to check your app’s compliance.

​
How It Works

The agent uses a multi-agent system to maximize accuracy:
  1. Two independent AI agents scan your code in parallel
  2. A third agent merges and verifies the results to reduce false positives
  3. Findings are split into Must-Fix (required for HIPAA compliance) and Nice-to-Fix (recommended hardening)
  4. Handled-for-you controls (like encryption in transit and at rest) are shown as already covered
  5. Areas that don’t apply to your app are marked Not Applicable
  6. Findings are organized into clear categories with plain-language descriptions of what was found and where
Once issues are flagged, you can copy them into the AI Coder chat and ask it to fix them — or send them directly to Maestro for automated fixes. After applying fixes, re-run the agent and it will automatically mark resolved issues as complete.

​
Audit Log Implementation

Maestro can also plan and implement HIPAA audit logging for PHI/ePHI surfaces in your app. It inspects your repo, confirms PHI surfaces with you, walks through policy decisions (reviewer access, retention period, self-access rules), and wires inline audit logging into every approved read/write surface.

​
What It Checks

The agent scans across 11 categories:

​
Usage

  1. Open your project in the AI Coder
  2. Click the shield icon in the toolbar to open the Compliance Center
The shield icon (highlighted) opens the Compliance Center
  1. Click Run Scan
  2. Review flagged issues by severity
  3. Copy any issue into the AI Coder chat to get a fix
  4. Re-run the scan to verify fixes

​
Good to Know

  • Each full scan takes roughly 3-4 minutes and costs approximately 1 credit
  • The agent includes automatic retry if a scan fails mid-run
  • All scan history is saved so you can track your compliance progress over time
The HIPAA Compliance Agent helps identify potential issues in your code, but it does not guarantee full HIPAA compliance on its own. Always consult with a compliance professional for your specific requirements.