CareBand × Regis Healthcare — Patent Positioning & Technology Alignment Review

Export full PDF

B — Regis Evidence Base

Cybersecurity & Cloud Direction

Regis' public material addresses information security, service-provider access and control over where information is stored and who may access it.

Public position

Security and access control

Regis' privacy policy describes maintaining confidentiality through storage and security, controlling access through access and identity-management systems, and protecting information when using service providers. Privacy and governance source

Data location and providers

The policy also describes controlling where information is stored and who has access, including where service providers are involved. Privacy and governance source

Why minimum-necessary release is a security control

  • Reducing what is released reduces what can be exposed in a breach.
  • Attribute-level release limits the blast radius of a compromised account.
  • Time-bounded access reduces standing privilege across a large workforce.
  • Jurisdiction-aware policy supports control over where information may travel.
  • Decision records support post-incident reconstruction of what was actually disclosed.

CareBand positioning

The CareBand patent position contemplates region and jurisdiction-aware policy, relationship and organisation-aware access for service providers, selective decryption of permitted attributes only, and recording of every disclosure decision. Each is a security-relevant property as well as a privacy-relevant one.

Verification panel

Publicly confirmed

  • stated use of access and identity-management systems
  • stated control over storage location and service-provider access
  • stated privacy-by-default intent where possible

Not publicly confirmed — requires technical verification

  • cloud architecture and hosting model
  • whether decryption occurs at attribute level
  • whether temporary decrypted copies are persisted
  • how quickly revocation propagates to vendors and applications

Technical implementation not publicly disclosed

Sources referenced on this page

← Data, Analytics & ResearchIdentity & Point-of-Care Access →