Encrypted in transit
The clinical workspace is served over TLS. Browsers are told not to fall back to an open connection.
Security
Built so a hospital security review has something to read
Access follows the role and the hospital. The archive does not accept ordinary changes. Actions on a study are written down.
Access by role and hospital
A hospital user sees that hospital. A radiologist sees the studies they hold. Operators work the queue they are responsible for.
Archive stays read-only
Once a study is archived, ordinary users cannot change it. Retention is a system rule.
Per-study history
Who assigned, who reported, who returned, and who delivered is kept against the study.
Edge protection
The public edge rate-limits traffic and locks out repeated abuse, so a scan does not become an outage.
AI stays inside the chain
Where AI is enabled, its draft or review is attributed and audited. It does not complete the report on its own.
This page describes product controls. It is not a certification. Agreements for patient data are made with your organization, and they cover the clinical workspace at urpax.io.