Identity & MFA
Keycloak-backed user administration and MFA controls. Signing re-verifies the password at the moment of decision.
CONTROL STARTS WITH OWNERSHIP
Your laboratory’s data.
Your chosen environment.
A portable, self-hosted architecture for Saudi laboratories, with scoped identity and a clear conversation about operational readiness.
HOSTED ON YOUR TERMS
Keep the environmentwithin your control.
The reference architecture runs on customer-controlled hardware, without a cloud runtime dependency. Deployment inside the Kingdom is a hosting choice established with your organization.
Your organization’s environment
IdentityApplicationDatabase
Self-hosted · Site-scoped · ConfigurablePLATFORM CONTROLS
A concrete security conversation.
Start with the controls that exist, then agree the operational prerequisites for your deployment.
Scoped access
Working-site scope is resolved from the authenticated request. Governed changes validate their organization hierarchy.
Write audit evidence
An append-only mutation trail and separate approval history preserve changes. Patient record viewing is not audited today.
Before clinical deployment
TLS termination, tested backup and restore, disaster recovery, monitoring and alerting must be established for the deployment. These are pilot prerequisites, not delivered infrastructure in the reference stack.
FRAMEWORK DISCUSSION
Evidence first. Certification claims never assumed.
Designed to support ISO 15189 evidence. Not itself certified. Regulatory applicability and contractual requirements must be assessed for each deployment.
PDPL / SDAIAReview with your organization
NCA ECCReview with your organization
NDMOReview with your organization
MOH / CBAHIReview with your organization
ISO 15189Review with your organization
LET’S TALK ABOUT YOUR LAB
Bring us your bench.
We’ll bring the proof.
See the workflows, the quality gates, and the decisions behind every result.