> ## Documentation Index
> Fetch the complete documentation index at: https://docs.specode.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# HIPAA Compliance Agent

> Scan your codebase for potential HIPAA violations with the built-in Compliance Agent

## Overview

Specode includes a built-in HIPAA Compliance Agent that scans your codebase for potential HIPAA violations - no setup required. Run it on demand from the **Compliance Center** inside the AI Coder whenever you want to check your app's compliance.

## How It Works

The agent uses a **multi-agent system** to maximize accuracy:

1. **Two independent AI agents** scan your code in parallel
2. **A third agent** merges and verifies the results to reduce false positives
3. Issues are categorized by severity: **Critical**, **High**, **Medium**, **Low**

Once issues are flagged, you can copy them into the AI Coder chat and ask it to fix them. After applying fixes, re-run the agent and it will automatically mark resolved issues as complete.

## What It Checks

The agent currently covers a focused subset of HIPAA rules, including:

* **Authentication and session security**
* **Data handling practices**
* **Common compliance pitfalls**

Additional categories will be added over time.

## Usage

1. Open your project in the AI Coder
2. Click the **shield icon** in the toolbar to open the **Compliance Center**

<Frame>
  <img src="https://mintcdn.com/specode/4Avu-HxunXimB7Lj/images/compliance-center-icon.png?fit=max&auto=format&n=4Avu-HxunXimB7Lj&q=85&s=cfd355ba28532d4b9ba41e50345a0b1d" alt="The shield icon (highlighted) opens the Compliance Center" width="1338" height="86" data-path="images/compliance-center-icon.png" />
</Frame>

3. Click **Run Scan**
4. Review flagged issues by severity
5. Copy any issue into the AI Coder chat to get a fix
6. Re-run the scan to verify fixes

## Good to Know

* Each full scan takes roughly **3-4 minutes** and costs approximately **1 credit**
* The agent includes **automatic retry** if a scan fails mid-run
* All scan history is saved so you can **track your compliance progress** over time

<Note>
  The HIPAA Compliance Agent helps identify potential issues in your code, but it does not guarantee full HIPAA compliance on its own. Always consult with a compliance professional for your specific requirements.
</Note>