Synarmic is being developed to coordinate first-90-days patient engagement journeys using agreed care events, patient replies and approved content. It surfaces possible barriers and supports care-team handoffs. Inferred barriers are hypotheses. Clinical decisions remain with clinicians.
Demonstrations use fictional patient records. Do not submit real patient information through this website, booking links or the current demonstration environment.
A future operational deployment may process identifiable care events, medication context, patient replies, consent preferences and relevant measurements within the agreed program scope. Before any live transfer, we must agree the minimum-necessary fields, permitted uses, data flows, vendor arrangements, safeguards and applicable agreements, including a Business Associate Agreement where required. A signed agreement alone does not establish deployment readiness.
The current implementation includes individual accounts, role-based authorization, clinic-scoped records, session expiry and revocation, and authenticator-based MFA with an optional enforcement policy. Account provisioning and recovery require controlled administration.
Workflow checks cover consent, opt-outs, source freshness, contact limits and clinical-review requirements. These controls govern simulated messages independently of advisory AI output.
The public marketing website and the patient engagement application are separate systems. The website uses Netlify. Application source supports local and cloud deployment, but source support is not evidence that a particular hosted environment has passed security or recovery acceptance.
Live-data readiness requires verified transport and storage protections, key management, backups and restore testing, monitoring, access review and incident procedures. Synthetic application tests do not establish HIPAA compliance, SOC 2 certification or independent security assurance. We make no Synarmic certification claim.
Optional AI advice uses a bounded evidence context and allowed actions. It cannot authorize messaging, override safety rules or make clinical decisions. The current product does not automatically train models from patient outcomes or staff feedback.
Application activity records support review, but should not be treated as a complete, immutable audit trail. Production audit retention and monitoring must be verified before live use.
For pilot engagement data, our existing commitment remains retention for the engagement and no more than 90 days after engagement close, followed by deletion. Clients may request earlier deletion in writing; we will confirm deletion within 30 days of the request. The signed engagement documents should describe the applicable handling and deletion process.
Our existing commitment remains notification to affected clients within 72 hours of becoming aware of a security incident involving clinic-provided data, a written summary of known impact, and reasonable cooperation with the investigation. Applicable law and signed agreements may impose additional requirements.
Contact compliance@synarmic.com. Please describe the issue without including patient records, passwords or access tokens.
Synarmic Health LLC · Orlando, Florida