Current launch posture
- Public marketing data is stored separately from the private product.
- Demo applications require an explicit no-PHI acknowledgment.
- Clinical records remain in CentralReach.
- Secrets belong in hosted environment configuration, never in source control.
- Access and production controls will be verified before any broader claim.

ABA