Framework

HIPAA Privacy, Security, and Breach Notification Rules

Compliance mapping for HIPAA Privacy, Security, and Breach Notification Rules.

View sample proof pack Request a demo

Access controls

Roles, approvals, and audit trails

Scoped credentials

Least-privilege access where supported

Access logging

Export and sharing audit trails

Encryption

At rest and in transit

Summary

Framework mapping summary

Catalog entry

Type: Regulation

Publisher: U.S. Department of Health and Human Services (HHS)

Versions: 1

Coverage (representative version)

Requirements

Mapped controls

Evidence specs

112

Automation tests

Versions

Supported versions and coverage stats

Aurora's catalog can include multiple published versions of a standard or regulation. Select the version that matches your reviewer request.

45 CFR Part 164 (Subparts A, C, D, E) – current compilation

View source

Requirements

Mapped controls

Evidence specs

112

Automation tests

Exports

Framework mapping is only useful when it produces proof.

Aurora uses framework mappings to scope work, attach evidence, and export reviewer-ready deliverables.

Scope and control mapping

Map requirements to Aurora controls
Assign owners and approval gates
Keep decisions tied to exports

Evidence and freshness

Attach artifacts to controls and answers
Track capture dates and expiration
Export binder-ready folders with provenance

Reviewer-ready exports

Generate proof packs and binder exports
Produce point-in-time snapshots for assessment windows
Keep citations attached so reviewers can verify

Controlled sharing

Share curated artifacts through a Trust Center
Gate access with tier rules and agreements
Export access logs for audit trails

Next step

See how this maps to your next reviewer request

Use exports to align on scope

Start with the deliverable reviewers accept, then map backward to the controls and evidence you need.

Bring one request, get a plan

We will map the shortest path: required controls, evidence objects, integrations, and the export format reviewers expect.

Request a demo

FAQ

Does this mean Aurora certifies us?

No. Aurora helps you map requirements to controls and export proof. Certification decisions remain with your auditors and certification bodies.

Can we run multiple frameworks in one system?

Yes. Aurora is designed for reusable control mapping and evidence so you can expand without redoing work.

Can we start without integrations?

Yes. Manual uploads and mapping work on day one, and you can add connectors on your schedule.

Next step

Want a proof pack for your framework?

View the export formats first, then we will map the shortest path to reviewer-ready proof.

View sample proof pack Request a demo

Have a deadline? Tell us. We can prioritize export-ready proof.