Implemented in CloudCare
Facility isolation, role-based access, multi-factor authentication, audit logging, HTTPS and managed secrets protect the platform today.
Facility isolation
Isolation is enforced in the database so each facility can access only its own authorized workspace records.
Role-based authorization
Permissions are centralized and data-driven. Roles are never stored on the user record itself.
Audit logging
Every administrative action is recorded with actor, action, resource and outcome.
Encryption
All traffic is served over HTTPS. Credentials and keys are stored in managed secrets, never in code.
Clinical data stays with the facility
Patient records belong to the facility that holds them and are never shared with another facility without authorization. Dedicated clinical environments are designed to host them once externally provisioned and verified.
Provided by deployment infrastructure
Dedicated clinical environments, external backups and recovery, and infrastructure health verification become operational only after the provisioning service and hospital environment are connected and tested.