Administrative
Examples could include policy and procedure evidence, training completion, risk-management actions and governance records.
The Airlock platform — in development
One evidence layer across the safeguards your clinic relies on
Airlock is being built to act as a single Compliance Evidence Layer across the administrative, technical and physical safeguards clinics rely on.
The journey starts with Detect. From there, the same discovery-led, evidence-led model is designed to expand across wider safeguards — applying the same managed lifecycle across more of the clinic environment so risk stays visible, remediation stays on track, outcomes are verified and evidence stays current in support of continuous compliance.
Detect proves the model first
Patient-data exposure is the starting point, not the end state.
Detect solves a clear problem that Airlock already understands how to deliver: exposed patient data sitting outside controlled systems.
It also proves the wider operating model — capture evidence, identify gaps, coordinate action, verify outcomes and preserve proof over time.
The wider platform should only expand after that first model works reliably for real customers.
Future direction
Administrative, technical and physical safeguards can feed the same evidence lifecycle.
These examples are illustrative future directions, not committed functionality.
Compliance Evidence Layer™
Technical
Examples could include access controls, logging, backup evidence, security configuration and patient-data exposure.
Physical
Examples could include facility-access processes, workstation/device handling and other physical safeguard evidence.
One source of truth
Build evidence over time rather than restarting at each review.
As additional safeguard evidence is added, Airlock is intended to maintain the same underlying pattern for every item.
That creates a growing evidence record across the clinic rather than separate annual packs that quickly become outdated. The goal is not simply to collect more evidence; it is to apply the same managed lifecycle across more of the clinic environment so continuous compliance can be supported more broadly.
- What was in scope
- What evidence was captured
- What risk or gap was identified
- What action was taken
- How the outcome was verified
- What proof exists now
Work with what the clinic already uses
Existing systems and providers remain central.
The wider Airlock platform is not intended to replace the clinic’s IT provider, security tools, HR systems, policy tools or every specialist safeguard system.
Airlock’s role is to connect evidence from those systems into a managed lifecycle, surface gaps, coordinate corrective action and keep the proof current.
Start with the first problem
The wider platform begins with patient-data exposure.
Request a Free Exposure Check to see where exposed patient data already exists and experience the first implementation of the Airlock model.