Access & privacy · Planned wiring

Roles, permissions and care-data rules

Keycloak realm import exists in-repo (identity/taurus-realm.json). This static site does not claim live SSO for HIAB modules.

Designed roles

  • Platform administrator
  • Facility owner or manager
  • Healthcare professional
  • Assessor or consultant
  • Project manager
  • Equipment manager
  • Training manager
  • Funder or investor
  • Supplier or partner
  • Read-only reviewer

Controls

  • Permissions scoped by role and project
  • Audit logs, document versioning and approval workflows (platform backlog)
  • No AI silent edits to clinical records — proposed changes need authorised review
  • POPIA / HIPAA-class checklist for professionals: lawful basis, minimisation, access control, retention, breach process — not a certification claim

Do not upload real patient PHI into demo tools on this static site.