Policy Document
AI Usage and Human Oversight
Version 2026.3 · Updated February 8, 2026
Control commitments
| Domain | Implementation |
|---|---|
| Human oversight | AI output remains draft-only; clinician/reviewer confirmation is required before lock or billing transitions. |
| Data minimization | Only required workflow fields are sent to AI services, and no tenant cross-over context is permitted. |
| Logging and telemetry | No PHI in analytics payloads; model operations are tracked using redacted control-plane events. |
| Model governance | Prompt and model-version changes use controlled rollout with audit trails and regression review. |