Security & privacy
Minimize patient data. Keep humans in control. Preserve an audit trail.
SurgiRite is being architected for healthcare deployment with a belt-and-suspenders posture rather than relying on the claim that supply software can never encounter protected information.
Patient-data minimization
The product does not request patient names, dates of birth, MRNs, demographics, or clinical notes for its core inventory and case-supply workflows. Case references may still be sensitive in context and are not marketed as automatically de-identified.
Private supply images
Receipt images are stored in private object storage and served through authenticated, site-scoped application routes rather than exposed as public image URLs.
Tenant and site scoping
Server-side data access resolves the signed-in user's organization and site and applies site scoping to application queries rather than trusting a client-supplied site identifier.
Human confirmation
AI-extracted receipt data remains a proposal. Human confirmation is required before inventory and economic ledger events are created.
Auditability
Product mutations write audit events, and inventory movement is modeled as an append-only ledger with cached current counts.
BAA-capable direction
The target posture is to use HIPAA-eligible infrastructure and appropriate business-associate agreements where required. Specific contractual and compliance claims should be validated before paid deployment.