Privacy
Privacy is a system boundary, not a footer promise.
This public notice describes the product’s current design. A clinic’s executed agreement and configured retention policy govern its live deployment.
Public website
Do not submit patient information through the public deployment-request form. It is intended for business contact details and a short description of the practice workflow. The request is retained in encrypted storage and is not used for advertising.
Clinical workspaces
Each clinic is isolated in its own encrypted database. Clinical access requires an individual account, a password and a second factor. Access, changes and emergency use are recorded. Patient-derived text is excluded from long-lived audit detail and observability by contract.
Model use
Deterministic clinical assessment does not require a model. Model drafting is off by default. A deployment may enable only a transport approved by the clinic, with minimised inputs, receipts, verification and human review.
Retention and rights
Retention is clinic-configured and versioned. Legal holds prevent destruction. A preview and authorised approval are required before a destructive run. Patient access disclosures show who viewed the record and under what category of authority.