> ## Documentation Index
> Fetch the complete documentation index at: https://docs.medera.info/llms.txt
> Use this file to discover all available pages before exploring further.

# PHI Handling

> How PHI flows through the platform

* PHI never leaves the tenant boundary

* PHI is not stored in managed cache (volatile, not compliant)

* PHI is not logged in application logs (Winston has a PHI redaction filter)

* PHI fields are encrypted at the column level

* Phone and email are hashed for search; the cleartext is never queryable

* Backups are encrypted with the same KEK as live data