Data & Compliance

This page describes the safeguards and shared responsibilities that protect data within the PrimeCare system. It is maintained by the facility administrator and is not an independent certification.

Access Control

• Role-based access separates administrator and employee permissions.
• Sensitive management functions are restricted to administrators.
• Accounts can be locked automatically after policy violations.

Data Security

• Data is transmitted over encrypted connections.
• Row-level security restricts records to authorized users.
• Access credentials are never stored in plain text.

Audit & Accountability

Key actions are recorded in an audit log so that changes to profiles, records and configuration remain traceable and reportable to administrators.

Data Retention & Deletion

Records are retained per operational and legal requirements and are securely removed when no longer needed.

Shared Responsibility

The hosting platform provides infrastructure security, backups and encrypted storage. The facility is responsible for managing user access, following internal policy, and handling data lawfully.

Reporting a Concern

To report a security or privacy concern, contact the facility administrator at admin@goshenseven.com.