Data
Isolated by construction.
Row-level security on tenant data, PHI classified and bounded to the departments with a lawful need, minimum necessary by default.
Security and compliance
Boring on purpose. Bounded by design.
No broader security or agreement-coverage statement is approved for publication. Tenant isolation enforced in the database on every tenant-scoped table. One authorization choke point in code. Least-privilege agents with budgets, versioning, and full traces.
The floors we publish
§ 01 / the floors we publish
vocabulary discipline is part of security
Access
One choke point.
Every authorization decision flows through one auditable path, with facility, platform, and worker roles kept distinct.
Accessibility
A constitutional floor.
WCAG AA, 320px reflow, 200 percent resize, full keyboard, visible focus, status never by color alone.
Claims
Said plainly or not at all.
No broader security or agreement-coverage statement is approved for publication, and nothing certified is claimed before the award exists on file with its date and scope.
Ask us the hard questions.
Security review packets are part of every organization conversation.