Privacy

What this site is

Lab Orders Lite is a portfolio demo of a clinic lab-ordering app. Every patient, order, and result in it is fictional. Please do not enter real personal or health information anywhere in this demo.

Session analytics

The deployed demo uses Microsoft Clarity to record how visitors move through it — pages viewed, clicks, and scrolling. This exists so the author can see how the demo is used. Clarity sets its own cookies and processes this data under Microsoft's privacy statement. A production deployment handling real patient data would remove this tool or operate it under a healthcare data agreement (BAA).

What the demo stores

• Anything typed into the demo (patients, orders, pasted requisition text) is saved in the demo database and may be cleared at any time without notice.
• Access uses a shared passcode; a signed, httpOnly cookie keeps the session for up to 30 days. Signing out deletes it.
• Standard server logs (request paths, timestamps) exist for operations.

AI processing

Text pasted into the “incoming order” box is processed by Claude on AWS Bedrock inside the same AWS account that hosts the demo — there is no third-party API key, and AWS does not use Bedrock inputs to train models. The output only proposes form values; a person reviews everything before anything is saved.

Security, briefly

Traffic is TLS-encrypted; the database is not reachable from the internet; secrets live in a managed vault; external callbacks are cryptographically signed. The full security posture, including what is deliberately deferred, is documented in the project README.

Contact

Questions about this demo: i@elhags.com.