Trust Center
Privacy by design. Compliance not claimed.
We design around the ideas in HIPAA, LGPD and GDPR-style rules. None of it has been legally reviewed, and we claim no compliance with any of them.
Model Designed
- A US-style compartmentalised model by default: minimum necessary, audit, encryption and break-glass.
- For Latin America, strict privacy is a switchable optional paid tier, with country overlays designed for Brazil, Colombia, Chile, Mexico and Argentina.
- Patient records never go on the shared ledger.
- Deletion by destroying compartment keys where law allows. Whether that counts as erasure is pending legal opinion.
In the pilot Pilot
- VIP and restricted flags hide a patient from anyone without an explicit care assignment.
- Break-glass with reason, time limit and mandatory review.
- A mental-health compartment behind an attested purpose.
- Per-patient access report and disclosure log for privacy staff.
- Masked national IDs with audited reveal.
These are flags and an attested purpose. They are not a consent engine, and they do not implement minors, reproductive or 42 CFR Part 2 rules.
Fast record access is a goal
The owner wants record requests answered much faster than the 72-hour norm. That is a design goal. No turnaround has been measured and no patient portal exists.
| Framework | Our position |
|---|---|
| HIPAA (US) | Design reference. No compliance claim. No business associate agreement offered. |
| LGPD (Brazil) | Design reference for the strict tier. No compliance claim. Local counsel required. |
| GDPR | Design reference for deletion, correction and access. No compliance claim. |
| ONC certification, SOC 2, ISO 27001, HITRUST, FDA | Not pursued, not held. Deferred until legal and licensing review. |
| Peru and other Latin American laws | Country profiles are designed, not built, and marked for legal review. |
Legal review is a prerequisite, not a footnote
The build deliberately deferred legal review and licences (for example SNOMED CT and CPT) so that the product could be shaped first. Nothing on this site is legal advice.
Working through a privacy questionnaire?
Send it to us. We will answer plainly, including "not yet".