Data minimization
Collect only what an approved workflow genuinely requires.
Privacy
Privacy must be designed into every data boundary.
This frontend currently stores no account, booking, payment, or patient records. Future collection requires an approved purpose, retention policy, and access model.
Tenant isolation
Business-owned information must remain separated at backend boundaries.
Auditable access
Sensitive and administrative access must be reviewable and appropriately restricted.