Shared does not mean universally visible.

Governance model

The platform is designed around scoped access to claim objects rather than assuming every participant can see everything. The data model includes participants, consent records, document permissions, audit events and evidence provenance.

Current hosted environment

Implemented foundations

• Administrative surfaces separated behind an admin session.
• Prototype role-scoped API access for claim functions; production user identity is not yet implemented.
• Document permission and claim-consent data structures.
• Audit events for key changes.
• Persistent PostgreSQL and document storage are configured in the hosted development environment.

Required before production sensitive data

• Production identity provider and user authentication.
• Object-level access enforcement across all claim entities.
• Formal database migrations and deployment controls.
• Security monitoring, key/secret management and operational controls.
• Privacy, retention and incident-response operating procedures.

Digital-health interoperability

ClaimThread includes FHIR import, consent and identifier structures and reference metadata for Australian digital-health standards. Live accredited My Health Record connectivity is not enabled in the current build.