Security & Governance Architecture
HealthPlusGo is designed from the database engine up to protect sensitive patient health information (PHI) and clinical records.
PostgreSQL Row-Level Security (RLS)
Strict multi-tenant isolation enforced at the database engine level. Every tenant record is cryptographically bound to an immutable tenant_id and verified session context.
Branch-Scoped Least Privilege
Collection centres and technicians operate under strictly constrained branch isolation. Satellite staff cannot view central financial ledgers or unassigned facility accessions.
Step-Up Signatory Approval Gate
Digital sign-off requires secondary step-up authorization and approved clinical catalogue versions. Technicians and front desk cannot finalize clinical reports.
High-Entropy Opaque Session Tokens
Sessions use 256-bit cryptographic tokens stored strictly as SHA-256 hashes. Cookies are issued with __Host- prefixes, HttpOnly, SameSite=Lax, and Secure flags.
Secure Cloud Infrastructure & Data Protection Architecture
Dedicated cloud infrastructure with strict PostgreSQL Row-Level Security, purpose-limited data processing, least-privilege database roles, and TLS 1.3 / AES-256 encryption in transit and at rest.
Safe Report Delivery & Short-Lived Sessions
Patient QR codes contain non-sequential high-entropy tokens exchanged for 15-minute viewing sessions. Predictable sequential report IDs and public file buckets are strictly prohibited.