-
01
No production PHI workflow today
No covered-entity production pilot or clinical-record workflow is represented
on this site. Scheduling, website, or general business operations are not
permission to process protected health information.
-
02
No standard BAA promise
A Business Associate Agreement is not a standard self-serve feature or
published entitlement. Any future BAA requires counsel-approved language,
verified subprocessors, and a documented technical scope.
-
03
Minimum-data design
The intended boundary is the minimum business signal needed for a reviewed
workflow. Clinical notes, diagnoses, imaging, lab results, and treatment
decisions are outside the current product scope.
-
04
Evidence before launch
Tenant isolation, access control, retention, incident response, vendor terms,
audit exports, and deletion behavior must be tested and documented for the
exact healthcare scope before any production use.