Built like the regulators are watching — because they are.
Tenelix treats security and audit as the substrate, not a layer. Every clinical action is attributable, every tenancy boundary is enforced at the database, and every customer can choose where their data lives.
Four pillars, end-to-end.
Tenant isolation by design
Standard tenants share a row-isolated database; Enterprise tenants get a dedicated PostgreSQL database. Same image, same code — only the connection differs.
PHI access logging
Every read of a patient record emits a structured event. Tenant, user, action, and timestamp — queryable from your audit dashboard.
Three-layer authorization
Route abilities, FormRequest::authorize(), AuthorizationService::authorize() — every action is checked at three layers before it touches data.
Tenant-aware structured logging
All logs carry tenant_id, user_id, request_id. Filter incidents by tenant. Forward to your SIEM. Nothing slips through unattributed.
Choose your blast radius.
Tenelix supports three tenancy modes — standard, enterprise cloud, enterprise self-hosted. Same Docker image; only environment variables differ.
| Standard (shared) | Enterprise — Cloud | Enterprise — Self-Hosted | |
|---|---|---|---|
| Database isolation | Row-level by tenant_id | Dedicated PostgreSQL database | Customer's PostgreSQL |
| File storage | Shared S3 bucket with prefix-per-tenant | Dedicated S3 bucket per tenant | MinIO or S3-compatible (customer-managed) |
| Sessions / cache / queue | Sessions, cache, queue in tenelix_tenants_shared | Sessions, cache, queue in tenant_{uuid} | All services run inside customer infrastructure |
| Best for | Cost-effective SaaS, small/mid clinics | Large hospitals, strict compliance | Data sovereignty, no-internet sites |
What's actually implemented.
Network & infrastructure
- TLS 1.3 in transit, AES-256 at rest
- VPC isolation, private subnets for app and data tiers
- WAF + rate limiting at the edge (CloudFront)
- Quarterly penetration testing (planned for GA)
Identity & access
- Role-based access (14 modules, three layers of authorization)
- Magic-link patient portal authentication
- Configurable session timeout per tenant
- SSO (SAML, OIDC) and SCIM provisioning on Enterprise
Audit & forensics
- Immutable PHI access log
- Typed audit columns on overrides (e.g., [CLEARED WITHOUT PAYMENT])
- Lifecycle audit on forms, prescriptions, invoices
- Tenant-scoped logs forwardable to your SIEM
Data residency
- Cloud (default): AWS regions selectable per Enterprise tenant
- Self-hosted: customer's own infrastructure, no data leaves the network
- MinIO or S3-compatible storage on self-hosted deployments
- Backup and DR runbooks shipped with the self-hosted stack
Where we are. Where we're going.
We publish status, not promises. NDPA 2023 controls are implemented today; HIPAA, GDPR, SOC 2 Type II, and ISO 27001 are sequenced across 2026–2027.
Found a vulnerability?
We run a coordinated disclosure program. Email security@tenelix.com with steps to reproduce. We acknowledge within 48 hours and triage within five business days.
Ready when you are
Read the architecture before you commit.
Get our security whitepaper, threat model, and data-flow diagrams. Reviewed by your team, signed by ours.