A data flow map shows how PHI enters, moves through, and leaves your organization. Auditors ask for this to verify that every path is covered by appropriate safeguards.
Building your map
Open Data Flow Map from the Compliance section. The map is a visual diagram built from nodes (systems, people, locations) and edges (data flows between them). You can:
- Add nodes representing your systems, departments, vendors, and data stores
- Draw edges showing how PHI flows between them
- Label each flow with what data moves and what safeguards protect it
Let Copilot generate it
Ask Compliance Copilot to "generate a data flow map based on our vendors and data inventory." It will create a starting point based on what it knows about your organization.
Attestations
Like the data inventory, your data flow map supports attestations — responsible parties confirm the map accurately reflects how data moves. These attestations are logged and included in your audit evidence.