Security & compliance
In healthcare, trust is the product. Nightingale was built inside the hospital's walls from the first line — firewalled, closed, and accountable — because a system that asks clinicians to trust it has to earn that before it does anything else.
100% firewalled
The Flock — and the fabric it runs on — operates entirely inside the hospital's own perimeter. Patient data is not shipped to a third-party cloud to be processed and returned. There is no outbound pipe for PHI, because we didn't build one.
It's a structural choice, not a configuration you have to trust someone to set correctly. The safe posture is the only posture.
Mockingbird · the closed model
No cloud AI
The intelligence in Nightingale is a closed model that lives inside your walls. Mockingbird lifts documentation and teaches in the moment — but it is not ambient surveillance and it is not a pipe to someone else's cloud. The name is the promise: it faithfully repeats what it hears, and keeps none of it.
More on MockingbirdDowntime documentation
Every hospital has a binder for when the systems go down. Nightingale replaces it. Our offline documentation mode keeps clinicians working — capturing care at the bedside with no paperwork — and reconciles cleanly the moment systems return. Downtime stops being a documentation disaster you clean up for a week afterward.
Owl · continuous compliance
Owl holds the hospital's accreditation standards against what's actually happening in the fabric, and flags drift the moment it appears. Readiness becomes a state you maintain continuously — with the evidence and the audit trail already assembled.
Inside OwlRequirements tied to real evidence in the fabric — not a binder updated before survey.
A gap is surfaced the day it opens, while there's still time to close it.
Every consequential decision leaves a trail. Refusal-grade gates cite their evidence.
Continuous mock-survey scoring so the real one is a formality, not a fire drill.
Our posture, in one line
The safe choice is the default choice. When the system isn't sure, it refuses — and shows you why.
The design laws behind this