Make the scope and data requirements explicit.
Begin with a suitable internal workflow and review privacy, contractual, and security requirements. This site does not claim HIPAA compliance, clinical validation, or suitability for patient care decisions.