Amorphic provides the technical controls that support HIPAA, NIST, and other frameworks: access control, encryption, classification, audit logging, and monitoring. Compliance also requires organizational policies, stewardship, and control documentation. The platform provides the technical layer; the agency operates the governance.