Security
How data is handled
Stated plainly, including what is not finished yet. This page describes design intent and is not a contract, a certification or a compliance attestation.
What is in place by design
- De-identified views. In the application, analytics and the copilot read de-identified views of tenant data rather than raw identifiers.
- Small-cell suppression. Small counts are suppressed in outputs so a figure cannot single out a few individuals.
- Tenant isolation. Each customer organization's data is kept separate from every other tenant's.
- Role-based access. What a person can see or change depends on their role.
- Audit logging. Sensitive actions are recorded so they can be reviewed.
- Public tools. The free tools use public CMS data only and collect no patient information.
- Synthetic demos. Demos and this repository use synthetic data only. Please do not send patient information.
What is not claimed
- Working toward HITRUST e1; Margin is not certified.
- No independent audit, penetration-test report or attestation is claimed.
- This site does not assert regulatory compliance. Any obligations, including business associate terms, are set by a separate customer agreement.
- The privacy and terms pages are drafts pending legal review.
- Model outputs are estimates, not actuarial opinions.
Responsible disclosure
If you believe you have found a security problem, please tell us through the contact page and mark the message “Security”. A dedicated security mailbox and disclosure policy are placeholders and will be published here. Please do not include patient information in a report.