Trust is part of the workflow, not a marketing badge.
Burhaneo is designed around traceable evidence and human decisions. A live hospital deployment requires provider-specific technical, privacy and regulatory due diligence.
What production architecture must address.
Implementation and independent testing are distinct from making a compliance claim.
Access controls
Identity, role-based permissions and appropriate organization isolation.
Auditability
Trace changes to claims, rules, review actions and operational access.
Data safeguards
Encryption, controlled retention, backups and safe deletion procedures.
Clinical oversight
Human reviews are required for clinical uncertainty and downstream decisions.
Incident readiness
Operational monitoring, escalation, security testing and incident-response plans.
Vendor review
Hosting, model providers and data subprocessors must be approved before real records are processed.
Saudi PDPL is a deployment requirement.
Any processing of personal or health information must be assessed under the applicable Saudi Personal Data Protection Law and implementing regulations, including lawful purpose, contractual responsibilities, access, retention, third parties and transfers.
Burhaneo does not represent the public demonstration as an approved patient-data environment.
Official reference
The Saudi Data & AI Authority provides the PDPL and implementation guidance.
SDAIA regulations ↗Medical software classification
Saudi SFDA classification depends on intended use and actual functionality. It should be assessed with qualified counsel and the appropriate authority before operational deployment.
SFDA digital health guidance ↗A clinical finding is not an insurer decision.
Burhaneo flags evidence gaps for review. It does not determine medical necessity or automatically submit, adjudicate or approve claims. Changes to the intended use could affect the regulatory assessment.
Be precise about what is live.
Available for exploration
- Fictional claims review and document handling
- Rule references, source excerpts and human action screens
- Demonstration workspaces and operational workflows
Not yet represented as approved
- Hospital-authorized real patient data processing
- Live NPHIES/HIS connectivity
- Verified Saudi insurer-specific medical criteria
- Independent clinical performance or legal certification
For US contexts, a HIPAA Business Associate Agreement may be relevant to certain data relationships, but a BAA is not equivalent to product certification. No generic “HIPAA certified” claim is made for Burhaneo.