Trust

Security & Data Handling

Effective October 19, 2026

This page is for the people who have to sign off on a pilot: the CIO, the CISO, the privacy officer. Plain answers, no padding.

What we collect — and what we never touch

• Everything public runs on synthetic data. Every demonstration on this site uses fabricated operational scenarios. Nothing you see in a demo is real hospital data.
• The pilot capture tool records operational entries only — shift events at the unit level. It does not collect patient data, protected health information, or identifiable employee information.
• Real operational data is never used until the hospital’s own approvals are in place — institutional technology, privacy, and security review — with a business associate agreement where applicable.

How the systems are protected

• Hosted on Cloudflare. Traffic is encrypted in transit (HTTPS), and the site carries standard security headers.
• Access is gated. Demonstrations, the pilot capture tool, and the review tracker are protected by Cloudflare Zero Trust. Access is provisioned per email address — only people the site owner adds can get in — using email PIN sessions.
• Non-punitive by design. The unit is the operational object, never the individual employee. There is no individual tracking, ranking, or surveillance.

What we ask for, and what we do with it

• If you contact us, the details you provide (name, role, organization, work email, message) are delivered by email through our form provider, FormSubmit, and used only to respond.
• Website analytics are provided by Cloudflare Web Analytics: no cookies, no individual identification.

Retention and export

Pilot data is retained for the length of the pilot and exported to the site on request. Retention and destruction terms are set in the site agreement before any pilot begins.

Questions

Write to the email address listed on the site. If your organization runs a vendor security review, send the questionnaire there — it will get a straight answer.