Built for health data. Said plainly.
Fratera handles prescription and patient-identifying data, so the architecture starts there. These are the controls we are building into the platform today — no more, no less.
Tenant isolation with RLS
Every query runs under row-level security keyed to the tenant. One workspace's data is not addressable from another, by design rather than by app-layer convention.
Step-up signing
Signing a prescription requires a fresh authentication step. A stolen session alone cannot produce your signature.
Append-only audit trail
Drafts, edits, signatures, and dispensing status changes are logged with actor and timestamp. Records are written, not overwritten.
AES-256-GCM for PII
Patient-identifying fields are encrypted at rest with AES-256-GCM, on top of transport encryption for every request.
Fratera is built to support HIPAA-aligned operations for its pharmacy and clinic customers. Compliance obligations remain shared: we provide the controls, customers operate them. Ask us about current attestations and a BAA before go-live.