Govern
Governance
Roles, policies, consent, classification, retention, MDM rules and approval workflows.
Roles
RBAC, scope, members
Access policies
ABAC + RBAC rules
Consent rules
Treatment, research, marketing
Classification
PHI, PII, Confidential
Retention
Retention & legal holds
Approval workflows
Multi-step approvals
Retention schedules
Per-domain retention with legal holds.
| ID | Domain | Policy | Legal hold | Status |
|---|---|---|---|---|
| R-01 | Encounters | 7 years after last activity | None | Active |
| R-02 | Pediatric records | Until age 21 + 7 years | None | Active |
| R-03 | Audit logs | 10 years immutable | None | Active |
| R-04 | Research datasets | Per IRB protocol | IRB-2025-118 | Active |
| R-05 | Marketing logs | 2 years | None | Active |