Section 09
Security concepts
Data classes, isolation, encryption, audit, retention and AI boundaries in brief.
- Data classes: Synthetic, De-identified (first release); Identifiable (planned, gated).
- Isolation: tenant identifiers enforced in the application and the database; per-dataset schemas.
- Encryption: TLS in transit; managed keys at rest.
- Audit: append-only events for approvals, access, runs, decisions and exports.
- Retention: defaults per record type; confirmed deletion.
- AI boundary: protocol text only; never patient data.
Read the full security approach. No certifications or compliance status are claimed.