Enterprise Data & Governance
Data Governance Overview
How workforce health data is classified, protected, accessed, and governed across the PayRX platform.
Sample dataObserved
Data classification tiers
4
PHI · PII · Aggregated · Operational
ObservedAccess roles
6
role-based access control
ObservedPrivacy controls enforced
7/8
data-layer enforcement
MeasuredMinimum aggregation
11
members per group shown
ObservedData classification tiers
DetailsPHI839 records
Protected Health Information
Weight, BMI, blood pressure, HbA1c, prescription records, clinical outcomes
Access: PayRX Care Team, PayRX Clinical Staff
Retention: 2555 days
PII5,000 records
Personally Identifiable Information
Name, email, employee ID, department, location, role title
Access: PayRX Admin, Employer HR (eligibility only)
Retention: 1095 days
Aggregated
Aggregated / De-identified
Workforce KPIs, cost summaries, participation rates, trend charts
Access: Employer Admin, Benefits Director, Finance, CHRO
Retention: N/A (de-identified)
Operational
Operational & Vendor Data
SLA metrics, vendor performance, system uptime, audit logs
Access: PayRX Admin, Procurement
Retention: 365 days
Role-based access control
Audit trailEmployer AdminRead
Aggregated workforce data only
Can see: KPIs, Trends, Cost summaries, Participation rates
Cannot see: Individual clinical records, Member-level health data, PHI
Enforcement: Data-layer enforcement — not just UI hiding
Benefits DirectorRead
Program-level aggregated data
Can see: Enrollment funnel, Clinical outcomes (aggregated), Vendor performance, Fee structure
Cannot see: Individual member records, Raw clinical measurements, Member identities
Enforcement: Data-layer enforcement with ≥11 minimum aggregation
CHRO / HR LeadershipRead
Workforce intelligence (aggregated)
Can see: Absenteeism trends, Productivity metrics, Retention data, Department summaries
Cannot see: Individual health data, Clinical records, PHI
Enforcement: Data-layer enforcement with ≥11 minimum aggregation
PayRX Care TeamRead/Write
Individual member clinical data
Can see: Member health records, Clinical measurements, Messages, Appointments
Cannot see: Employer financial data, Other members' data (need-to-know)
Enforcement: Per-member access control, audit logged
PayRX AdminAdmin
Platform administration
Can see: System configuration, User management, Audit logs, All data categories
Cannot see: Clinical decision context (not clinicians)
Enforcement: Role-based, MFA required, all actions logged
Auditor (Read-Only)Read
Compliance and audit access
Can see: Access logs, Data modification history, Configuration changes, Compliance status
Cannot see: PHI content (metadata only), Clinical values
Enforcement: Read-only, time-boxed access, logged
Privacy controls
All controlsSmall-cell suppression (≥11 minimum)
Data-layer (server-side)
No employer access to individual records
Data-layer (server-side)
Filter combination protection
Data-layer (server-side)
De-identification methodology
Policy + technical
Role-based access control (RBAC)
Data-layer (server-side)
Audit logging
System-wide