Version: 1.0.0Documentation Index
Fetch the complete documentation index at: https://docs.encoreos.io/llms.txt
Use this file to discover all available pages before exploring further.
Last Updated: 2026-02-18
Source: CL-PM-SPEC-REVIEW Finding 8.3 This document classifies CL and PM database tables by data sensitivity for access control, logging, and compliance. PHI = protected health information; PII = personally identifiable information; SUD = substance use disorder (42 CFR Part 2–protected when applicable).
Classification Levels
| Level | Meaning | Logging / Sharing |
|---|---|---|
| PHI | Health information that identifies or could identify an individual | Never in logs; never to external AI; encrypt at rest and in transit |
| PII | Non-health identifiers (name, SSN, contact) | Never in logs; last-4 SSN only where required (e.g. PM); full SSN in vault |
| SUD | Substance use disorder treatment information | 42 CFR Part 2; consent required for disclosure; treat as highest sensitivity |
| General | No direct identifier (e.g. aggregate, codes only) | Org/site/user IDs and codes OK in logs per policy |
CL Tables
| Table | Classification | Notes |
|---|---|---|
| cl_patient_charts | PHI | Links to patient; chart content PHI |
| cl_problems | PHI | Diagnosis and problem list |
| cl_assessments | PHI / SUD | Full assessment may include SUD; consent required for disclosure |
| cl_treatment_plans | PHI | Goals and interventions |
| cl_progress_notes | PHI / SUD | Note content; SUD if substance use documented |
| cl_medications | PHI | Medication list |
| cl_prescriptions | PHI | Prescription details |
| cl_consents | PHI / SUD | Consent scope may reference SUD |
| cl_disclosure_log | PHI | Disclosure events; no content in logs |
| cl_risk_screenings | PHI | Suicide risk, etc. |
| cl_safety_plans | PHI | Safety plan content |
| cl_group_sessions | PHI | Session and attendance |
| cl_group_attendance | PHI | Individual response may be SUD |
| cl_crisis_episodes | PHI | Crisis documentation |
| cl_sdoh_screenings | PHI | Social needs responses |
| cl_social_referrals | PHI | Referral and outcome |
| cl_peer_encounters | PHI / SUD | Peer service may involve SUD |
| cl_outcome_measures | PHI | PROMs and scores |
| cl_pdmp_queries | PHI | Query/response; log query_id only, no response content |
PM Tables
| Table | Classification | Notes |
|---|---|---|
| pm_patients | PHI / PII | Demographics; SSN last-4 only in table; full SSN in vault |
| pm_insurance_policies | PHI / PII | Member ID, subscriber info |
| pm_eligibility_checks | PHI | Benefit and eligibility |
| pm_appointments | PHI | Appointment and patient link |
| pm_encounters | PHI | Encounter and patient link |
| pm_charges | PHI | Charge and diagnosis/procedure codes |
| pm_claims | PHI | Claim and line items |
| pm_payments | PHI | Payment and patient/claim |
| pm_prior_authorizations | PHI | Auth and patient |
| pm_messages | PHI / SUD | Message content may be SUD |
| pm_portal_users | PII | Link to patient; no PHI in table |
| pm_telehealth_sessions | PHI | Session and patient link |
PF Tables (Clinical/PM Boundary)
| Table | Classification | Notes |
|---|---|---|
| pf_patient_identities | PII (minimal) | MRN and org only; no names |