Glossary

Per-clinic isolation

The rule that keeps one clinic from seeing another clinic's data in the same system.

In CHIRON

Tables with patient data carry the rule in the database, and the routes that write check that the record belongs to the clinic making the request.

What is Per-clinic isolation?

In a system used by many clinics, each one only sees its own rows. The rule lives in the database (RLS, row-level security), not only on the screen.

A rule that lives only on the screen can be worked around. In the database, it holds for every path to the data.

Set up with you. No lock-in.