Privacy architecture

Keep clinical information out of the public marketing layer.

Webstudio owns public content and demo discovery. Separate governed application services own authentication, clinical connections, production workspaces, assessment generation, and checkout.

No PHI in marketing forms

Public pages collect only the minimum non-sensitive information needed.

No clinical analytics

Do not record health questions, diagnoses, medications, member identifiers, or record content.

Consent and retention

Use explicit consent, data minimization, and defined retention in connected systems.

The Meikai boundary

Inspectable by design.

The final privacy policy requires legal review and must accurately reflect the production services, vendors, jurisdictions, and rights process.

Meikai supports organization, preparation, analysis, and governed workflow execution. It does not replace clinicians or independently determine treatment.

Next step

Review the assessment boundary