Ingests and normalizes audit logs (including FHIR AuditEvent) into a single model for correlation and export.
Benefits
- Unified audit model
- Rapid correlation
- Easy regulator exports
Capabilities
- Adapters for EMR/Apps
- Correlation by user/patient
- Signed export packages
Goal: One normalized audit model (including FHIR AuditEvent) for EMR, APIs, apps, and exports, so investigations answer who accessed what, when, and why across systems.
Ingest & Normalize
- Adapters for EMR, API gateways, integration engines, file systems, and cloud apps.
- Normalization to a common schema (actor, patient, action, object, channel, outcome).
- Retention tiers and WORM options for legal defensibility.
Investigation Tools
- Patient-centric and user-centric timelines with session stitching.
- Export packages: signed ZIPs with queries, findings, and evidence manifests.
- Automated pattern finds (VIP snooping, mass lookups, after-hours spikes).