Security and privacy
Sensitive by design, clear about the boundary.
Vaux Nutrition Practice uses workspace isolation, server-side permission checks, and least-privilege data access. It is not HIPAA compliant at launch.
Workspace isolation
Supabase row-level security and server authorization keep each organization's records separate.
Minimum necessary data
The product prohibits PHI and sensitive clinical notes until formal HIPAA readiness is approved.
Account control
Owners can export or delete account data through explicit, audited controls.
Know what belongs here.
Do not enter diagnoses, medical record numbers, insurance information, or other protected health information.
Read the privacy policy