Identity, registration and scheduling · C0571
Does AuroraMed mask national identifiers by default and require purpose for unmasking, auditing each unmasking?
In the pilot (v0.2.0, synthetic data)
Short answer
The system must mask national identifiers by default and require purpose for unmasking, auditing each unmasking. That is REQ-0224, a top-priority requirement for all three tiers. It is one of the few requirements the pilot meets at MVP scope; nothing has touched real data. What v0.2.0 does today: Internal UUID + per-clinic MRN (Luhn); SSN masked by default, reveal needs a purpose and is audited. Test in the specification: unmask event appears in audit with purpose.
This exists in the synthetic-data pilot only.
- Specification item
- REQ-0224
- Specification priority
- P0 (of P0 to P3)
- Tiers
- Small, Medium, Large
Status as of September 30, 2026. Version 0.2.0, synthetic data only. See what's built today. Not legal, medical or security advice.
Related answers
- Does AuroraMed support patient-side identity proofing at IAL2-style assurance for wallet enrollment (in person or remote)? Designed
- Does AuroraMed record deceased status and propagate suppression to scheduling and outreach? Designed
- Does AuroraMed scan and OCR insurance and identification cards into structured fields with human confirmation? Designed
See it in context: Patient identity and master patient index · Search the help center · Ask a question