Trust Center

Audit trails, consent, BAAs, and security events.

Business Associate Agreement

Executed Aug 2025 · Auto-renews

active

7 connected processors, all under DPA/BAA

active

SMS/voice consent tracked for 1,214 patients

active

Last quarterly review completed Jul 12

completed

0 open incidents · 2 resolved this quarter

active

Clinical: 7 years · Communications: 3 years

active

User	Action	Resource	Time
Dr. Elena Rivera Physician · 10.4.1.22	Viewed chart	Margaret Chen	9:04 AM
Tomás Herrera Front Desk · 10.4.1.8	Checked in patient	Margaret Chen	9:02 AM
Dr. Sanjay Patel Physician · 10.4.1.31	Viewed escalated message	Robert Delacroix	9:51 AM
Beth Caldwell Billing Specialist · 10.4.1.15	Viewed claim	CLM-4471	8:47 AM
Rachel Nguyen Practice Administrator · 10.4.1.5	Changed agent autonomy	followup_agent	Yesterday 4:12 PM

Patient record — Aisha Washington
CCD (XML)
Rachel Nguyen · Aug 18, 2:20 PM
Reason: Patient-requested transfer to new PCP
Claims report — July 2026
CSV
Beth Caldwell · Aug 04, 9:10 AM
Reason: Monthly reconciliation
Audit log — Q2 2026
JSON
Compliance (automated) · Jul 01, 12:00 AM
Reason: Quarterly retention archive

Every export is logged with actor, scope, and reason (CLAUDE.md §20).

Former patient — Kyle Bennett
Patient (written request) · Aug 11, 2026 · Due: Sep 10, 2026
in review
Marketing contact list — 2024 imports
Rachel Nguyen · Jul 29, 2026 · Due: Aug 28, 2026
scheduled

Repeated failed sign-ins (front-desk terminal)
Severity: lowresolved
Jul 18, 2026
12 failed attempts traced to a mistyped password after rotation. Account locked per policy, reset verified, no access occurred.
Subprocessor TLS certificate expiry warning
Severity: lowresolved
Jun 02, 2026
Payer-gateway certificate renewed 9 days before expiry. No downtime, no data exposure.

Every material action is recorded with actor, resource, and trace ID. Agent actions are never anonymous.

Time	Actor	Action	Resource	Trace
11:32 AM	scribe_agent	note.draft_created	Encounter #E-2214 (Daniel Kim)	trc_8f2a
10:56 AM	coding_agent	coding.review_requested	Claim draft (Linda Papadakis)	trc_7e19
10:12 AM	prior_auth_agent	authorization.prepared	Cardiac MRI (Robert Delacroix)	trc_6c44
9:47 AM	clinical_inbox_agent	message.escalated	Message #M-9812 (Robert Delacroix)	trc_5b02
9:20 AM	insurance_agent	insurance.failed	Eligibility check (James Okafor)	trc_4a77
8:21 AM	insurance_agent	insurance.verified	Coverage #C-1102 (Margaret Chen)	trc_39f1
8:07 AM	receptionist_agent	appointment.created	Appointment #A-5521 (Margaret Chen)	trc_28d3
7:02 AM	system	workflow.batch_started	Morning eligibility sweep (6 patients)	trc_1101