Case Study: NucleusHealth achieves HIPAA-grade, scalable protection for patient imaging data with Thales Vormetric Transparent Encryption

How NucleusHealth uses advanced data security technologies to enhance clinical collaboration & patient outcomes

NucleusHealth, a cloud-based medical image management provider, needed an enterprise-grade, fully automated encryption and key-management solution to secure massive volumes of PHI, meet HIPAA requirements, support multi-tenant and segregated deployments, and prevent insider/root access to sensitive data. The company evaluated options and engaged Thales (Vormetric Transparent Encryption and the Vormetric Data Security Manager) to address these mission-critical security and scalability challenges.

Thales deployed Vormetric Transparent Encryption with centralized key management and role-based access controls, enabling automated deployment, reporting, policy-setting and audit traceability while protecting data in cloud environments. The Thales solution let NucleusHealth use the free open-source MongoDB, scale to petabyte‑level imaging datasets, enforce that only authorized users/processes can view PHI (even blocking root access), and achieve a cost-effective, HIPAA-aligned security posture with comprehensive access auditing.

NucleusHealth

Grant Cermak

Chief Information and Security Officer