Data, security and working principles
A first conversation should make the boundaries clear: what is needed, who can access it and what must be agreed before institutional work begins.
Start with a description, not a data transfer
The public inquiry form accepts a short description and business contact details. It has no document upload field. Do not include patient data, personal case details or confidential records. A first inquiry is not approval for access to institutional systems.
Access that exists today
The Roadyom administration routes require owner authorization. Client workspaces use institution-scoped access. These implemented controls do not constitute an independent security certification or a contractual guarantee for a future engagement.
Agree before work begins
The institution and Roadyom must agree the purpose, data categories, permitted users, retention and deletion arrangements, escalation contacts and publication permissions. Data residency, service levels and third-party processing must be established for the actual scope; they are not promised by this page.
AI remains bounded by the work
AI-generated suggestions require review. The owner administration advisor proposes a limited set of operations; applying a saved proposal is a separate owner action. Do not treat a generated answer as an institutional finding or a completed operation.
Research and confidentiality
Public outcomes require evidence and publication permission. A hypothetical example is labelled as such. Field interpretation, client-reported change and verified results must remain distinguishable. No client logo or attributable case is authorized by sending an inquiry.