Target verification level: L2, the level appropriate to an application processing sensitive data, and the level Pensieve Labs instructs a testing firm to verify against. No independent…
CHK-GL-032ChecklistGL123
Search all 478 artefacts by title, document ID or content.
The register
491 artefacts, 12,07,999 words, classified on five independent axes and versioned. 108 of them are public and open in one click; 228 sit on the critical path to cash.
Documents you cannot open yet are still listed, with the gate, the action that clears it and how long that takes. Hiding them would only make you send an email, and an email costs a day.
A further 109 artefacts are classified Internal and are not listed here. They describe how Pensieve runs itself rather than how it treats your data. The count is published because concealing it would be the same mistake in a smaller costume.
Target verification level: L2, the level appropriate to an application processing sensitive data, and the level Pensieve Labs instructs a testing firm to verify against. No independent…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Two populations, kept entirely separate, with different rules. DM-1 to DM-4 do not vary Section 3 (Pensieve Labs personnel). Section 4 (hospital users) describes Platform capability, which…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Two statements, issued together because hospitals ask for them together. Both exist because Edsol Edtech Pvt. Ltd. places its own personnel inside hospital premises during deployment, and a
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Supplied by Pensieve Labs for the hospital to issue to affected Data Principals. The hospital is the Data Fiduciary and the notifying party; Pensieve Labs supplies the text, the facts and…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
This Policy states what a member of Edsol Edtech Pvt. Ltd.'s personnel may and may not publish in public, on any channel, about Pensieve Labs, the Platform, a customer, a patient or the…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
This file carries two addressable documents:
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Edsol Edtech Pvt. Ltd. does not operate a data centre. It does not own, lease, share or have physical access to any facility in which hospital data is stored. Almost everything in this…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
The honest position first. Edsol Edtech Pvt. Ltd. operates no data centre. For DM-1, DM-2 and DM-3, physical and environmental security of the infrastructure is provided by the cloud…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
This is a short, fixed-price, hard-dated engagement in which Edsol Edtech Pvt. Ltd. deploys the Platform into one department of the hospital, runs it in production for a defined period, and
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Served before any maintenance that will interrupt or degrade the Platform, on the notice period set by the class of work in SLA-GL-001 clause 10.2.
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
POL-GL-134 governs the specific case of access to production data, including break-glass. This policy governs privileged rights generally: cloud administration, repository administration,…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
This is the control a hospital should interrogate first. Everything else in the policy set assumes that Pensieve Labs personnel cannot casually reach patient data. This document states how…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Edsol Edtech Pvt. Ltd.'s record of the processing it carries out as a Data Processor on behalf of hospitals. In GDPR jurisdictions this is the Article 30(2) processor record and a…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Between Edsol Edtech Pvt. Ltd. (Pensieve) and the hospital (the Customer)
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Status: Edsol Edtech Pvt. Ltd. holds no reference sites and publishes no customer names. STM-GL-025 Section 1 states the current position. This file is the specification, template and…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
The question this document answers: who can see our data, from where, under what controls, and can we stop them? It is the control on which every other control in this Trust Center depends,…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
The Australian fork of DIS-GL-033. This document exists because Australia contains the one constraint in Pensieve's portfolio that a contract cannot solve, and because a hospital that…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Applies to all Personnel in every deployment model. Where a hospital contractually restricts support to personnel located in a named jurisdiction, that restriction is recorded on the Order…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
To keep hospital data off portable media, and to control the narrow set of circumstances in which media is unavoidable.
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Between Edsol Edtech Pvt. Ltd. (Pensieve) and (the Partner)
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
This is not the drill report. REP-GL-013 records a scheduled continuity exercise. This document records the verification of a single restore, whether it was a drill restore, a restore…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Applies in all four deployment models. The risk profile differs sharply by model: DM-2 carries tenant-isolation risk, DM-4 carries patching and detection risk that sits with the hospital,…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Why this document is the only one in the policy set that is not public. A hardening standard states the exact configuration of the defences. Publishing it hands an attacker a map of what to…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Applies to DM-1, DM-2, DM-3 and DM-4 identically. The same application code runs in all four deployment models, built by the same pipeline from the same repository. What differs is where it…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
DIS-GL-018 is the customer-facing description of the pipeline. This policy is the binding internal rule set. Branch protection detail is POL-GL-133; release approval is POL-GL-107.
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Applies to all Personnel in every deployment model. Training for hospital staff on using Pensieve safely is a separate programme delivered under RBK-GL-016 and certified in CRT-GL-005; this…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Free, same-day, and independently reproducible. Every grade below can be re-run by any reader against a public scanner, without Edsol Edtech Pvt. Ltd.'s cooperation, in under five minutes.…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Served on the Customer within 4 hours of Pensieve Labs becoming aware of a Security Incident affecting the Customer's data or tenancy (DPA-GL-001 clause 10.2). This is the notice the…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
The honest position, first. Edsol Edtech Pvt. Ltd. is a small company. Full segregation of duties between development and operations is not achievable at this size and Pensieve Labs does…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Served on detection where the Platform is available but not performing to the targets in SLA-GL-001 clause 11. Degradation is notified because a hospital that does not know why the screen…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
SELF-ASSESSED. NOT AUDITED. Edsol Edtech Pvt. Ltd. holds no ISO/IEC 27001 certificate, no SOC 2 report and no third-party attestation of any answer below.
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Edsol Edtech Pvt. Ltd. has no SOC 2 report of any type. No examination has been commenced and no CPA firm engaged. SOC 2 produces a report containing a practitioner's opinion, not a…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
This agreement answers the question a hospital owner asks in the first meeting: "what happens if you shut down?"
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
6.1 Escrow answers a narrow question: if Edsol Edtech Pvt. Ltd. stops existing or stops performing, can the hospital keep running the Platform?
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
There is one codebase deployed into four deployment models. This policy applies identically to DM-1 through DM-4. Escrow (Section 4.8) is the mechanism by which a hospital in any model…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
This is an internal answer bank with an external face. Answers marked [PASTE] are approved for verbatim use in any hospital's questionnaire, RFP or vendor portal without further approval.…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Published quarterly. This is the artefact that lets a hospital's reviewer see that automated security testing is not merely configured but is finding things and closing them, which is the…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Served on the Customer when Pensieve Labs intends to add, replace or remove a sub-processor that handles the Customer's data. It opens the objection window in DPA-GL-001 clauses 8.4 and 8.5.
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
The Subprocessor Register (DIS-GL-009) is the source of truth for who the sub-processors are. It is public, dated and live; this policy does not list them and never will, because a list in…
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours
Between Edsol Edtech Pvt. Ltd. (Pensieve) and the hospital (the Customer)
Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: target 4 business hours