Public information only
Public Web
Product, pricing, trust, and legal pages. No free-text customer-content or file-upload intake.
Trust · Data Boundary
The public website is not the customer workspace.
Marketing, customer data, HÉDÉONIX operations, and workers remain separate trust boundaries.
Customer data plane
Customer Workspace
Authenticated members process Product Threads, documents, and review records. Objects and files carry organization scope.
Control plane
HÉDÉONIX Operations
Account, subscription, service state, and incident operations. No default access to document content; support requires a scoped customer grant.
Limited processing boundary
Worker
Document, email, and background jobs re-check user, organization, purpose, and input snapshot with least privilege.
Initial paid beta
No PHI does not mean low-risk data.
Allowed
Product facts, versions, jurisdictions, schedules, regulatory and quality work, document drafts, and external-QMS references.
Prohibited
Patient-level PHI, clinical source data, national identifiers, authentication secrets, or anything outside the agreed data catalog.