Compliance
Incident response
A suspected incident starts with containment: revoke sessions, keep the audit log, and notify the clinic contact. This page is the public description of that path, not the internal runbook.
What to send
Email hello@orbixmed.com with the time, the organization, and what looked wrong. Do not include clinical notes or member ids in the first message.
What we preserve
Request ids and audit entries stay available so access can be reconstructed without rewriting history.