§ Operativ — security posture
HIPAA-aligned · SOC 2 in progress
HIPAA-safe by default
Treatment names never leave in SMS. Every outbound message is scanned for PHI before send and redacted automatically.
Row-level security, every org
Data is siloed at the database level. No cross-tenant leakage — by design, not by policy. Enforced with Postgres RLS.
Approval gates, everywhere
Every customer-facing action pauses for your tap. Nothing ships without you. Agents cannot self-approve; gate bypass is architecturally impossible.
Every action, audit-logged
Who sent what, when, to whom. Every agent action, every owner approval, every message. Exportable on demand as CSV or SIEM feed.