Trust · Security + compliance posture
What's live today vs. what's gated on the first signed partner.
This page reads from the same controls inventory engineering uses internally. It's honest about the phase: most controls in the "Design partner" column are scheduled for the pilot deployment, not implemented yet. The "Production" column is everything we expect to ship before a paid customer.
16
Live in demo
17
Gated on design partner
4
Pre-production roadmap
Network + Transport
Edge security
- LiveTLS 1.3 (HTTPS-only)All adkinslabs.dev traffic enforced via Vercel HSTS preload.
- LiveHTTP/2Default on Vercel edge.
- LiveStrict-Transport-Security headerSet by Next.js config; 2-year max-age.
- Design partnerContent-Security-PolicyLockdown CSP planned for pilot phase.
- ProductionWeb Application FirewallVercel Firewall rules configured pre-launch.
Authentication + Session
Access control
- Livebcrypt password hashing (cost 10)No plaintext passwords stored.
- LiveJWT in HttpOnly · Lax · Secure cookiesjose-signed HS256, 24h TTL.
- LiveAuth rate limiting (IP + email)20 attempts / IP / 15 min · 5 attempts / email / 15 min.
- LiveCSRF double-submit cookie patternpneuma_csrf cookie + x-csrf-token header for state-changing requests.
- LiveMulti-tenant strict isolationEvery query scoped by tenant_id; null-tenant rejected by middleware.
- Design partnerMFA / WebAuthn for clinical staffRequired by JCI MOI.2 — Phase 3 build.
- ProductionSSO (SAML / OIDC)Per-hospital identity provider integration.
Data Protection
At-rest + in-transit
- LiveAES-256-GCM PII column encryptionpassport_number encrypted with iv:tag:ciphertext envelope.
- LiveFull-disk encryption (Neon Postgres)Storage-layer encryption provided by Neon.
- Design partnerTenant-scoped key derivation (HKDF)Per-tenant keys derived from master + tenant_id.
- Design partnerEncryption key rotationVersioned keys with re-encryption migration on rotation.
- Design partnerPII redaction in logspino-http with redact paths on all routes.
Audit + Compliance
PDPA + JCI alignment
- LiveAuth event audit log (every login attempt)auth_audit_event table; insert per success/failure/logout/rate-limit/csrf.
- Design partnerPHI access audit logPer-row read logging on all dashboard queries.
- Design partnerPDPA consent ledgerAppend-only consent + withdrawal endpoint; UI capture flow.
- Design partnerPDPA RTBF (right-to-be-forgotten) processorAsync deletion request worker, statutory grace period.
- Design partnerPDPA retention sweepDaily cron deleting records past statutory retention.
- ProductionTamper-evident audit log (append-only enforcement)DB triggers prevent UPDATE/DELETE on audit table.
- ProductionSOC 2 Type IIEstimated 18-month roadmap; tracking via Drata or Vanta.
Reliability
Operations + uptime
- LiveHealth check endpointGET /api/health returns DB liveness + commit SHA.
- LiveAutomated daily DB backupsNeon point-in-time recovery (7-day window on free tier; 30d on prod plan).
- LiveCI/CD on git pushVercel auto-deploy from main branch.
- Design partnerStructured logging (pino)Replace ad-hoc console.log with structured JSON.
- Design partnerExternal error tracking (Sentry)Sentry integration for runtime exception capture.
- Design partnerUptime monitoring + alertingExternal pinger (Better Uptime / Pingdom) with on-call rotation.
- Design partnerStaging environmentSeparate Vercel environment with isolated DB.
- Design partnerDocumented DR runbookSee docs/DR_RUNBOOK.md (in repo).
Data Residency
Where data lives
- LiveTLS 1.3 in transit (global)Vercel edge network.
- LiveDemo data: Neon us-east-1Demo environment — no real patient data; geography is fine.
- Design partnerPatient data: Bangkok or SingaporeAzure Thailand North if GA; Neon ap-southeast-1 (Singapore) as documented PDPA-disclosed interim.
- Design partnerCross-border transfer consentPer-patient PDPA consent with explicit purpose (home_country_pcp_share).
- Design partnerDPA with Neon / Vercel / sub-processorsPre-pilot signing of all vendor data processing agreements.
Want the full controls roadmap?
docs/ENTERPRISE_READINESS.md in the repo has the timeline, the gap analysis, and the order of operations. Available on request under NDA.