The Airlock Model

A new model for healthcare compliance

Airlock is being built as a managed Compliance Evidence Layer™ across the systems, safeguards and controls clinics rely on — an operating layer designed to help clinics move from point-in-time compliance toward continuous compliance.

The idea is simple: scope the environment, capture current evidence, identify what needs attention, coordinate corrective action, verify the result and keep the evidence current as the clinic changes — instead of rebuilding proof from scratch each time a review appears.

Start With Airlock DetectExplore the Wider Airlock Platform

The gap between controls and proof

Clinics already have safeguards. The evidence around them is often fragmented.

Clinics rely on IT systems, security controls, policies, processes and physical safeguards every day. Those controls may be operating, but the evidence that proves what is in place, what changed and what action was taken is often spread across tools, inboxes, documents and people.

Airlock is designed to sit across that environment as the managed evidence layer — not to replace every underlying system or operate every safeguard itself.

Scope → Capture → Identify → Remediate → Verify → Evidence

One managed lifecycle designed to support continuous compliance

ComplianceEvidence Layer™
  1. 1Scope
  2. 2Capture
  3. 3Identify
  4. 4Remediate
  5. 5Verify
  6. 6Evidence
  1. 01

    Scope

    Confirm the systems, safeguards, controls and workflows Airlock will include, together with access, responsibilities and relevant IT involvement.

  2. 02

    Capture

    Capture current operational evidence from the safeguards already operating across the clinic.

  3. 03

    Identify

    Identify risk, missing evidence and areas that require attention.

  4. 04

    Remediate

    Coordinate agreed corrective action with the responsible person, IT provider or system.

  5. 05

    Verify

    Confirm what changed and whether the intended outcome was achieved.

  6. 06

    Evidence

    Maintain an organised, current record of the finding, action and verified outcome so proof is ready when needed.

Clinic • IT • Airlock

Airlock adds an evidence layer without displacing existing responsibilities

Clinic

Owns compliance accountability and authorises the service.

IT provider / MSP

Continues managing systems, infrastructure, security controls, identity, access and support.

Airlock

Manages the evidence lifecycle: discovery/capture, findings, remediation coordination, verification and evidence.

Start with a real, visible problem

Patient-data exposure is the first implementation of the Compliance Evidence Layer.

Detect gives Airlock a practical problem through which to prove the model end to end: discover exposed data, assess it, remediate it, verify the outcome and maintain evidence.

Once that lifecycle works reliably for patient-data exposure, the same evidence model can be extended to additional safeguards where there is a clear operational and commercial case.

See How Detect WorksExplore the Wider Airlock Platform