Current design notes for customer conversations. This page is not a certification, audit report, SOC 2 package, or HIPAA determination. For questionnaires, email support@shadowmountain.ai.
Identifier filters
The product is designed to reject names, dates of birth, and medical record numbers as intake fields. Chart identifiers, when used as opaque references, are hashed before storage. That is a minimization control. It is not a statement about whether a given dataset is regulated.
Deployment isolation
The current architecture runs each customer organization as its own deployment with a dedicated application and database. Facilities are modeled inside that deployment.
Defense Records
Reports are versioned and downloadable with generation integrity checks. That check means the file matches what the system produced. It is not clinical sign-off, family consent, or a substitute for legal review.
Scoring integrity
Deterministic risk scoring is designed to remain authoritative. Explanations may describe findings; they are not designed to lower a score.
The public Site
The Site is intended to be served over HTTPS. Demo requests are accepted only through the published form. Analytics load only after cookie consent. See Privacy and Cookies.
Reporting a vulnerability
Email support@shadowmountain.ai. Please give us ninety (90) days to investigate before public disclosure. We do not currently run a paid bounty. See the Acceptable Use Policy.
Contact
Shadow Mountain V, LLC
73101 CA-111 Unit 5
Palm Desert, CA 92260
Security: support@shadowmountain.ai · Request a demo