Trust & compliance

Built to be examined.

Pathways handles pre-operative patient information. Everything about how we do that is designed to survive a procurement review, a privacy assessment, and a governance committee.

Data sovereignty

All patient data is hosted in AWS Sydney (ap-southeast-2). PHI never leaves Australia — in storage, processing, or backup.

Encryption

Encrypted in transit (TLS 1.2+) and at rest. Keys managed in AWS KMS.

Patient links

Assessment links are signed (HMAC-SHA256) and time-limited. They expire, and expired links are visibly dead — never silently reusable.

Model isolation

No personally identifying information is sent to model providers. Extraction and reasoning operate on de-identified clinical content.

Access control

Role-based access. Booking staff, nurses and anaesthetists each see what their role requires — nothing more.

Audit & tracing

Org-wide and per-patient audit logs; full workflow tracing on every analysis. Exportable for governance committees and accreditation.

Deterministic rules

Safety-critical screening rules are versioned and testable. Every output records the rule version that produced it.

Privacy framework

Operated under the Australian Privacy Principles. Privacy impact documentation available for procurement review.

Pathways is a clinical decision support tool. It assists — it never replaces — the judgement of qualified clinicians.

Need the governance pack?

Architecture, privacy documentation, and audit samples — assembled for procurement.