Data
Encryption
Protection of data in transit and at rest where implemented and configured.
Current platform control
Security & data integrity
Healthcare infrastructure requires more than good design.
Solia Direct is built around the controls a laboratory expects from a system that touches patient data, orders and results.
Platform control model
- TransportTLS in transitCurrent
- StorageEncrypted at restCurrent
- AccessRole-scopedCurrent
- TenancyIsolated per laboratoryProduction requirement
- EventsAudit loggingProduction requirement
- ResultsLaboratory-authoritativeCurrent
Controls
The controls behind every laboratory deployment.
Each area below states what is a current platform control and what is configured as a production deployment requirement.
Access
Role-based access
Access scoped according to responsibility and operational function, including authentication and session handling.
Current platform control
Isolation
Tenant isolation
Production laboratory deployments are designed and configured for appropriate data isolation.
Production deployment requirement
Governance
Auditability
Administrative and access events are recorded where audit controls are enabled.
Configured for production deployments
Clinical
Result provenance
Official laboratory results remain authoritative. Solia Direct receives, structures, presents, versions and tracks provenance around those records — it never replaces them.
Current platform control
Integrations
Controlled integrations
Laboratory APIs, LIS / LIMS interfaces, HL7 / FHIR and other connections are explicitly configured and scoped to the narrowest required permissions.
Configured per deployment
Principles
Principles for handling laboratory data.
The laboratory owns the clinical record.
Solia Direct is a consumer layer on top of your systems. Reports, reference ranges and clinical interpretation stay with the laboratory.
Least privilege everywhere.
Every internal service, integration and staff role is scoped to the narrowest access that still lets the work happen.
No claims we cannot support.
We describe only controls that are implemented or supportable today — not certifications that have not been independently completed.
Solia Direct does not claim HIPAA compliance, SOC 2, HITRUST, or other certifications that have not been independently completed. We can walk your team through the current control architecture and production requirements in detail.
You already have the laboratory.Build the consumer business around it.
See how Solia Direct can be configured around your brand, catalog, workflows and laboratory systems.