Tenancy and access
One case. Several organizations. Nobody holds a standing key.
Each organization keeps its own tenant. Data crosses between them only on a grant: one case, one purpose, one expiry.
How access works
Enforced in the database
Row-level policy on every query. It holds when the application has a bug, which it eventually will.
Grants expire
A consulting specialist gets one case for three weeks, not a role that outlives the consult.
Every access recorded
A patient can see who looked. An administrator can see what left. A firm can see what was produced.
One specimen, nine release events
one specimen, nine release events
14:02
Specimen received
Accession created, requisition parsed, order matched to the referring practice tenant.
Laboratory tenant
14:03
Patient identity linked
Probabilistic candidate held for review rather than auto-merged. A false link is a disclosure to the wrong person.
Cross-tenant identity
09:41
Result verified and released to the ordering clinician
Discrete values mapped to LOINC, reference interval carried from the performing laboratory.
Laboratory tenant → practice tenant
09:41
Released to the patient
Same moment, no administrative hold. Plain-language summary generated above the report, never in place of it.
Patient identity
09:41
Ordering clinician notified of the abnormal flag
So the conversation happens quickly. Notification and open state are both recorded.
Practice tenant
09:44
Coder opens the report
Final diagnosis and specimen list visible. Slide images are not, because coding does not require them.
Billing tenant
11:20
Consulting specialist granted the case
One case, twenty-one days, expiring on a date rather than on a promise.
Grant across tenants
16:08
Firm requests records on the matter
Authorization parsed. Chemistry and pathology released; the Part 2 toxicology result is withheld and the omission is reported by name.
Firm tenant
16:08
Disclosure recorded
Requester, purpose, basis, classes released, classes withheld, and the result version current at release.
Audit record
Bring the thing that breaks today.
Thirty minutes. Your laboratories, your practices, and the one stakeholder you cannot easily give data to.
Book a 30-minute call service@meta.clinic