Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Take this survey on AI-driven code security, vulnerability management, and autonomous remediation to help shape industry research →

CSA STAR Registry

Security, Trust, Assurance, and Risk Registry

Listings for Clinelia Salud SpA

Listings for Clinelia Salud SpA

Clinelia Salud SpA (Tax ID RUT 78.535.597-0, SII Healthcare Provider 862021) operates Clinelia (clinelia.cl), a cloud-native synchronous telemedicine, mental health, and Electronic Health Record (EHR) SaaS platform in Chile.

Security, Privacy & Clinical Architecture
  • Data Sovereignty & Cloud Infrastructure: 100% hosted in Google Cloud Platform Region southamerica-west1 (Santiago, Chile), inheriting ISO/IEC 27001, 27017, 27018, and SOC 2/3 controls, and verified as 100% green infrastructure by The Green Web Foundation (ID #595).
  • Cryptography & Transport Security: Enforced TLS 1.3 (including post-quantum X25519MLKEM768), HSTS Preload, Mozilla HTTP Observatory Grade A+ (130/100), Qualys SSL Labs Grade A+, AES-256 encryption at rest, and WebRTC DTLS-SRTP video consultations without media recording.
  • Identity & Clinical Governance: Directed by licensed physicians (RNPI Superintendencia de Salud & Colegio Médico de Chile), enforcing OAuth 2.0 + TOTP 2FA, WebAuthn/FIDO2 Passkeys, HL7 FHIR R4 (CL Core) clinical interoperability, and SHA-256 QR document verification (clinelia.cl/seguridad | clinelia.cl/verificar).

Clinelia - Clinical Telemedicine & Electronic Health Record (EHR) SaaS Platform

Clinelia (clinelia.cl) is a multi-disciplinary synchronous telemedicine and Electronic Health Record (E...

Listed Since: 2026-11-01

CAIQ
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).