# HIPAA compliant ElasticSearch application **URL:** \ **Category:** Elasticsearch\ **Created:** [August 30, 2013, 11:31pm UTC](https://discuss.elastic.co/t/hipaa-compliant-elasticsearch-application/13417 "2013-08-30T23:31:26Z")\ **Posts on this page:** 1\ **Showing post:** 4
**Author:** ![Paul\_Brown](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/paul_brown/32/1449_2.png) [@Paul\_Brown](https://discuss.elastic.co/u/Paul_Brown)\ **Post date:** [September 2, 2013, 7:27pm UTC](https://discuss.elastic.co/t/hipaa-compliant-elasticsearch-application/13417/4 "2013-09-02T19:27:43Z")
Hi, Charitha -- You'll need to secure both the transport to the cluster (e.g., with HTTPS as some other posters suggested) and the internal transport within the cluster; see, e.g., [https://github.com/elasticsearch/elasticsearch/pull/2105](https://github.com/elasticsearch/elasticsearch/pull/2105). — prb@mult.ifario.us | Multifarious, Inc. | [http://mult.ifario.us/](http://mult.ifario.us/) On August 30, 2013 at 4:31:30 PM, Charitha Sathkumara ([srilankanchurro@gmail.com](mailto:srilankanchurro@gmail.com)) wrote: I am trying to implement a logging solution as part of an application that handles sensitive medical data. I intend on using Elasticsearch + Searchbox.io Jest for storage and retrieval of this data. HIPAA rules state that I must ensure that communications between my application server and elasticsearch server are encrypted. ## How would I go about protecting an Elasticsearch server and communications between the server and the Jest client? Any resources/tutorials/ideas would be much appreciated. You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). --- _[View the full topic](https://discuss.elastic.co/t/hipaa-compliant-elasticsearch-application/13417)._