Security & Governance
Security is part of the platform, not an add-on. Components marked Proposed are deployment options, not verified existing infrastructure. Compliance is a shared responsibility and is not guaranteed by this demo.
Approved MCP Tool Layer: Narrow, typed operations with role, purpose and data-classification checks.
Azure Front Door · proposed optionApplication Gateway / WAF · proposed optionPrivate endpoints · proposed optionAzure Monitor & Log Analytics · proposed optionKey Vault · proposed optionDefender for Cloud · proposed option
Partners cannot browse underlying patient databases
Partner identities can only invoke de-identified or aggregate MCP operations in their sandbox. Raw tables are not network-reachable from partner workspaces.