Technology

Built around a modern data platform.

Salus runs in Snowflake Snowpark Container Services. AI-assisted features call AWS through Amazon Bedrock. Snowflake and AWS each provide a Business Associate Agreement.

Zero vendor lock-in. Complete data sovereignty.

Salus runs in Snowflake Snowpark Container Services. AI-assisted features call AWS through Amazon Bedrock. Snowflake and AWS each provide a Business Associate Agreement. PostgreSQL remains a supported deployment dialect.

Snowflake SPCS and AWS

Enterprise scale, without managing infrastructure.

Salus runs in Snowflake Snowpark Container Services. AI-assisted features call AWS through Amazon Bedrock. Snowflake and AWS each provide a Business Associate Agreement. PostgreSQL remains a supported deployment dialect.

  • Elastic scale
  • Separation of compute and storage
  • Secure Data Sharing
  • Data governance
  • Time Travel
  • Zero-copy cloning
  • Snowpark
  • Cortex AI
  • Enterprise security
  • High availability
Architecture

From satellite labs to global health security.

Every satellite laboratory keeps local control and human review. Laboratory data runs in Snowflake Snowpark Container Services. AI-assisted features call AWS through Amazon Bedrock. Snowflake and AWS each provide a Business Associate Agreement.

What it demonstrates

Why this is the shape of the platform.

  • Every satellite lab keeps local control and human review before any data moves
  • Laboratory data reaches Snowflake Snowpark Container Services through a zero-trust perimeter, never the public internet
  • One governed core feeds epidemiologists, CDC / AIMS, and WHO from the same data
  • Public-health reference labs participate in the network; commercial clinical reference labs stay outside the public-health SLA
Federated satellite laboratories, Snowflake SPCS, AWS, and downstream reporting Download full resolution
Interoperability

Speaks the languages of public health.

Standards-based messaging and coding to the state feed and beyond, so Salus fits the systems your programs already depend on.

  • HL7 Version 2.x
  • HL7 FHIR
  • LOINC
  • SNOMED CT
  • ICD-10-CM
  • Electronic Lab Reporting (ELR)
  • CDC integration
  • Standardized instrument interfaces
Verifiable chain of custody

A tamper-evident record for every result.

Every specimen event and released result is written to an append-only, cryptographically anchored ledger. The result is a chain of custody you can verify, end to end, without trusting a single database administrator.

Salus, chain of custody
Salus chain of custody screen
Languages

Built for a multilingual public health workforce.

Salus ships in 16 languages, with right-to-left support, so staff work in the language they think in. Switch language anywhere from the top bar, or right on the sign-in screen.

enEnglish
esEspañol
frFrançais
deDeutsch
deDeutsch (CH)
itItaliano
ptPortuguês
plPolski
trTürkçe
ukУкраїнська
arالعربية
heעברית
faفارسی
hiहिन्दी
ja日本語
ko한국어
zh中文

Arabic, Hebrew, and Persian render fully right-to-left, including the layout.

Security & compliance

Enterprise security, built for healthcare.

Salus is designed around the controls public health laboratories and their data require. SOC 2 Type 1 is targeted for December 2026. SOC 2 Type 2 is targeted for January 2027. HIPAA is targeted for January 2027. HITRUST r1 has started, and completion is targeted for March 2027. The examinations are in progress under JIL Sovereign Technologies, Inc. (Delaware) with Johanson Group LLP. The reports are not issued. Salus does not claim a FedRAMP or StateRAMP authorization, and it does not claim certifications held by infrastructure it does not run on.

Platform controls

  • Role-based access control
  • Comprehensive audit trails
  • Encryption in transit and field-level encryption of direct identifiers
  • Secure authentication
  • Data governance
  • Compliance reporting
  • Cloud resiliency and backup

Public-health alignment

Standards Salus supports and aligns with directly.

  • HIPAA
  • NIST Cybersecurity Framework
  • NIST SP 800-53
  • CLIA
  • CAP
  • ISO 15189

Where data and AI run

Salus runs in Snowflake Snowpark Container Services. AI-assisted features call AWS through Amazon Bedrock. Snowflake and AWS each provide a Business Associate Agreement. A laboratory that requires a specific authorization, such as FedRAMP or StateRAMP, should raise it during procurement so the deployment is scoped to that requirement.

Data: Snowflake Snowpark Container Services, under a Snowflake Business Associate AgreementAI: Amazon Bedrock on AWS, under an AWS Business Associate AgreementEncryption in transit (TLS) at the public edgeNo FedRAMP or StateRAMP authorization is claimed
Deep dive

Technical architecture.

The complete technical reference for your architects and engineers: sixteen capability domains on one page, from the API and integration layer through Snowflake Snowpark Container Services and AWS to the zero lock-in export engine. It is the single artifact to put in front of a technical evaluation team.

What it demonstrates

Why we put this in front of your technical reviewers.

  • Salus runs in Snowflake Snowpark Container Services. AI-assisted features call AWS through Amazon Bedrock. Snowflake and AWS each provide a Business Associate Agreement.
  • Standards-based interoperability across the integration layer (HL7 v2 / FHIR, LOINC, SNOMED, OMOP)
  • Zero-trust security, tenant isolation, and a full audit and compliance surface
  • A zero lock-in export engine: open formats (JSON, HL7 FHIR, OMOP, Parquet, CSV), no exit fees
Enterprise-grade, secure, scalable, and interoperable, on Snowflake SPCS and AWS Download full resolution
Network security

Network & data security.

Salus runs in Snowflake Snowpark Container Services. AI-assisted features call AWS through Amazon Bedrock. Snowflake and AWS each provide a Business Associate Agreement.

What it demonstrates

Why we put this in front of your security reviewers.

  • A stateless application layer that holds zero PHI at rest, so the app tier is never a data-breach surface
  • Private-only connectivity (AWS PrivateLink / VPC endpoints), with no public internet egress
  • AI calls AWS through Amazon Bedrock. Snowflake and AWS each provide a Business Associate Agreement
  • End-to-end encryption: TLS 1.3 in transit, AES-256 at rest, with customer-managed KMS keys
Zero-trust private connectivity for public health data in Snowflake SPCS and on AWS Download full resolution