Product / Security
Who can see a record, and what gets logged.
The controls a practice is accountable for, stated plainly. This page answers procurement questions.
Controls
Three, all in production.
01
Encrypted at rest
The production database is encrypted on disk, not merely access-controlled.
02
Multi-factor and role-based access
MFA enrolment, plus five role levels from patient through admin, enforced on the server rather than hidden in the interface.
03
Audit trail and monitoring
Every access recorded, with continuous integrity verification, an automated anomaly check and a scheduled retention sweep.
On wording
We name the specific control.
Result parsing runs through a dedicated model sidecar operating under a BAA. Where a specific framework applies we will name it and the scope it covers; an unqualified claim of compliance tells a procurement reviewer nothing.