Audit & data handling

Every read of member data is written to Norvya's hash-chained audit log; if the log is unavailable, the read is refused rather than left unrecorded.
Webhook payloads carry no health data, only a reference to fetch with your token.
A business associate agreement is required before protected health information is exchanged.