Security Handling

The PDF scope says the platform does not interface with hospitals, doctors, or medical facilities and is not being presented as formal HIPAA certification.

It still uses HIPAA-aligned best practices where practical: encryption, access logging, least privilege access, passcode-gated disclosure, and time-limited record sessions.