Methodology
How Genesis Meridian computes, protects, and publishes outcomes.
Three-layer data topology
Tenant-identified data lives in logically isolated tenants with row-level security and tenant-scoped encryption keys. A de-identified analytical layer is fed by an audited de-identification pipeline. The public summary layer is computed exclusively from the analytical layer, with k ≥ 11 cell suppression enforced at query time, not just at publication.
De-identification pathway
The platform supports both Safe Harbor (§164.514(b)(2)) and Expert Determination (§164.514(b)(1)). Expert Determination is preferred because it preserves analytical utility, notably equity stratification and rural cohort analysis, and is certified by a qualified statistician contracted by SEIAI.
K-anonymity and small-cell suppression
Every cross-tabulation served to the public layer is checked against a minimum k of 11. Any cell that would expose fewer than 11 records is suppressed. Institutions can opt their cohort up to a higher k value if local risk assessment requires it.
SØVR-X consent governance
Each record carries four independently revocable consent axes: primary care, quality improvement, aggregate benchmarking, and public dashboard inclusion. Revocation propagates to the analytical layer within 24 hours and removes the record from all forward computations. Already-published aggregates remain a known and disclosed limitation.
Synthetic data disclosure
All numbers shown on the public dashboard during MVP are synthetic, generated for design and demonstration. Real subscriber data publishes after Expert Determination certification in Phase 2.