Security & multi-tenant design
Healthcare coordination data needs hard boundaries. Monitor.Care separates the control plane (tenant onboarding, identity configuration) from each customer’s clinical data plane.
Tenant isolation
Managed Postgres scopes every clinical record by tenant_id. Customers never share patient panels.
Your Azure option
Enterprise customers can host the data plane in their own Azure database while using our control plane.
Audit everything
Who/what/when/IP with before and after values for clinical and admin changes.
Entra / Google / password
Map Entra groups to app roles, restrict Google Workspace domains, or run email/password for pilots.
Role-based access
Admin, Coordinator, Reporting, and ReadOnly roles keep PHI exposure intentional.
Operational logs
Application and audit logs for platform admins during onboarding and support.
Identity models
Microsoft Entra ID
Customer tenant OIDC. Map group names/IDs to Monitor.Care roles.
Google Workspace
Domain-restricted Google sign-in with email→role bindings in Settings.
Email & password
Fast pilots and demos. Invite admins and coordinators from tenant settings.