Planisphere Download for Mac

Medicine · SCIF / Air-Gap Posture

SCIF / Air-Gap Posture for clinical AI workflows

SCIF / Air-Gap Posture in clinical AI workflows: what compliance requires, who asks for evidence, and the records to keep.

Legal forceBinding on IC elements and on cleared contractors through security agreements and contracts
SectorMedicine
Checked21 Oct 2026

01 / The rule

What SCIF / Air-Gap Posture requires

Intelligence Community elements, DoD components and cleared contractors that store, process or discuss Sensitive Compartmented Information (SCI) or operate classified information systems.

  1. 01Process, store and discuss SCI only in a SCIF accredited by the cognizant security authority.
  2. 02Build and operate SCIFs to the ICD/ICS 705 Technical Specifications, including intrusion detection approved by the CSA.
  3. 03Obtain CSA authorization before any contractor system processes classified information (32 CFR 117.18).
  4. 04Appoint an Information System Security Manager and follow the RMF steps, system security plan and continuous monitoring.
  5. 05Keep classified systems separated from unclassified networks; cross-domain transfers need approved solutions.

02 / In this sector

In a clinical AI workflow

AI models, data and tooling used on classified data must run on authorized classified systems inside accredited spaces; commercial internet-connected AI services cannot be used, and model updates or data imports cross the air gap only through approved transfer processes.

Usually asked by

Clinical committees and health system AI governance.

Named alongside

HHS §1557 · HIPAA · FDA PCCP.

Sector pagePlanisphere for medicine

03 / Records

Records to keep

  1. 01SCIF accreditation documentation and fixed facility checklist
  2. 02Classified system authorization (ATO) from the CSA
  3. 03System security plan and ISSM certifications
  4. 04Self-inspection and continuous monitoring records

Optional evidence · where Planisphere fits

Keep a record anyone can check

When your team meets a duty, Planisphere can seal the event it reports as a receipt.

01 · Your teamRecord the event

A disclosure shown, a review signed, a model change approved: the event your system reports.

02 · PlanisphereSeal it

The event becomes a sealed receipt, dated and attributed to whoever is signed in.

03 · AnyoneCheck it

Paste the receipt into Verify. No account or key.

A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.

SOURCES

Go back to the source

RELATED

Related: SCIF / Air-Gap Posture: the full guide · SCIF / Air-Gap Posture for defense · SCIF / Air-Gap Posture for law · SCIF / Air-Gap Posture for education