@iota-big3/sdk-regulated/README.md

Regulated Industries SDK for Healthcare, Finance, and Government

# IOTA Big3 SDK - Regulated Industries

Production-ready compliance solutions for Healthcare, Finance, and Government sectors.

## Overview

The Regulated Industries SDK provides comprehensive compliance frameworks and tools for heavily regulated industries:

- **Healthcare**: HIPAA compliance, PHI protection, EHR integrations
- **Finance**: PCI-DSS compliance, payment card security, fraud detection
- **Government**: FedRAMP compliance, classified data handling (coming soon)

## Installation

```bash
npm install @iota-big3/sdk-regulated
```

## Quick Start

```typescript
import { getRegulatedIndustriesSDK } from "@iota-big3/sdk-regulated";

const sdk = getRegulatedIndustriesSDK();

// Initialize Healthcare compliance
const hipaaManager = sdk.initializeHealthcare();

// Initialize Finance compliance (PCI Level 1)
const pciManager = sdk.initializeFinance(PCIComplianceLevel.LEVEL_1);

// Validate all compliance
const results = await sdk.validateAllCompliance();
```

## Healthcare (HIPAA Compliance)

### Features

- HIPAA control implementation and validation
- PHI data classification and encryption
- Business Associate Agreement (BAA) management
- Audit trail with 6-year retention
- Breach detection and notification

### Usage

```typescript
import { HIPAAComplianceManager, PHIData } from "@iota-big3/sdk-regulated";

const hipaaManager = new HIPAAComplianceManager();

// Add BAA agreement
await hipaaManager.addBAAgreement({
  id: "baa-123",
  coveredEntityName: "Hospital ABC",
  businessAssociateName: "Tech Partner XYZ",
  effectiveDate: new Date(),
  expirationDate: new Date(Date.now() + 365 * 24 * 60 * 60 * 1000),
  scope: ["data-processing", "storage"],
  signedBy: {
    coveredEntity: "John Doe",
    businessAssociate: "Jane Smith",
  },
});

// Access PHI with audit trail
const phiData = await hipaaManager.accessPHI(
  "user123",
  "patient456",
  "treatment",
  {
    patientId: "patient456",
    name: "John Patient",
    diagnosis: ["hypertension"],
    medications: ["lisinopril"],
  }
);

// Encrypt PHI data
const encrypted = await hipaaManager.encryptPHI(phiData);

// Generate HIPAA compliance report
const report = await hipaaManager.generateHIPAAReport();
```

## Finance (PCI-DSS Compliance)

### Features

- PCI-DSS Level 1-4 compliance support
- Credit card tokenization and detokenization
- Network segmentation validation
- Quarterly security assessments
- Fraud detection and prevention

### Usage

```typescript
import {
  PCIDSSComplianceManager,
  PCIComplianceLevel,
  PaymentCardData,
} from "@iota-big3/sdk-regulated";

const pciManager = new PCIDSSComplianceManager(PCIComplianceLevel.LEVEL_1);

// Tokenize credit card
const cardData: PaymentCardData = {
  cardholderName: "John Doe",
  primaryAccountNumber: "4111111111111111",
  expirationDate: "1225",
  cvv: "123",
};

const tokenizedCard = await pciManager.tokenizeCard(cardData);
console.log(tokenizedCard.token); // tok_abc123...

// Detokenize for processing
const originalCard = await pciManager.detokenizeCard(
  tokenizedCard.token,
  "processor-service",
  "transaction-processing"
);

// Perform quarterly assessment
const assessment = await pciManager.performQuarterlyAssessment();

// Generate PCI compliance report
const report = await pciManager.generatePCIReport();
```

## Compliance Validation

### Unified Compliance Checking

```typescript
const sdk = getRegulatedIndustriesSDK();

// Initialize all needed compliance managers
sdk.initializeHealthcare();
sdk.initializeFinance(PCIComplianceLevel.LEVEL_2);

// Validate all at once
const complianceStatus = await sdk.validateAllCompliance();

if (!complianceStatus.healthcare.compliant) {
  console.log("HIPAA violations:", complianceStatus.healthcare.violations);
}

if (!complianceStatus.finance.compliant) {
  console.log("PCI-DSS violations:", complianceStatus.finance.violations);
}

// Generate comprehensive report
const report = await sdk.generateComplianceReport();
```

## Audit Trail

All sensitive operations are automatically audited:

```typescript
// Access audit entries
const auditEntries = hipaaManager.getAuditEntries({
  userId: "user123",
  startDate: new Date(Date.now() - 7 * 24 * 60 * 60 * 1000), // Last 7 days
  classification: DataClassification.PHI,
});

// Subscribe to audit events
hipaaManager.on("audit", (entry) => {
  console.log("Audit event:", entry);
});

// Detect anomalies
hipaaManager.on("anomaly-detected", (anomaly) => {
  console.log("Security anomaly:", anomaly);
});
```

## Data Classification

The SDK automatically classifies data based on content:

```typescript
const classification = manager.classifyData({
  ssn: "123-45-6789",
  diagnosis: "diabetes",
  creditCard: "4111111111111111",
});
// Returns: DataClassification.PHI (highest classification wins)
```

Classifications:

- `PHI` - Protected Health Information
- `PII` - Personally Identifiable Information
- `PCI` - Payment Card Information
- `CLASSIFIED` - Government classified data
- `CONFIDENTIAL` - Business confidential
- `INTERNAL` - Internal use only
- `PUBLIC` - Public information

## Encryption

All sensitive data is encrypted using industry standards:

- **Healthcare**: AES-256-GCM for PHI
- **Finance**: AES-256-GCM with HSM key management
- **Government**: FIPS 140-2 validated encryption

```typescript
// Encrypt with automatic classification
const encrypted = await manager.encryptData(
  sensitiveData,
  DataClassification.PHI
);

// Decrypt with classification verification
const decrypted = await manager.decryptData(encrypted, DataClassification.PHI);
```

## Performance Requirements

The SDK is designed to meet stringent performance requirements:

### Healthcare

- API Response: <200ms for clinical data
- Bulk Operations: 100K records/minute
- Real-time Monitoring: <50ms alerts
- Availability: 99.99% uptime

### Finance

- Trading Latency: <1ms order execution
- Throughput: 1M transactions/second
- Batch Processing: 10M records/hour
- Data Accuracy: 100% reconciliation

## Security

- End-to-end encryption for all sensitive data
- Role-based access control (RBAC)
- Multi-factor authentication support
- Continuous security monitoring
- Automated vulnerability scanning
- Penetration testing support

## Development

```bash
# Install dependencies
npm install

# Run tests
npm test

# Build
npm run build

# Lint
npm run lint
```

## License

Proprietary - IOTA Big3 Corporation

## Support

For support, please contact: support@iota-big3.com