Security

The SimCharts platform is designed for healthcare simulation and medical education. Security, privacy and data minimization have been part of its design from the beginning. The platform is built to support education without requiring access to hospital systems or real patient records.

At a glance

Authentication: Microsoft Entra ID
Passwords: Never received or stored
Patient data: Not used
Hospital systems: No integration required
Student accounts: Not required

Security principles

Educational use only
No patient records
No hospital system integration
Microsoft Entra ID authentication
Data minimization
Least-privilege access

Educational Platform

The SimCharts platform is designed exclusively for healthcare education. It is not intended for clinical use and does not replace hospital information systems, Electronic Health Records (EHRs), Laboratory Information Systems (LIS), Picture Archiving and Communication Systems (PACS), or clinical decision support systems.

Clinical Data

SimCharts is built around simulated clinical data. It does not require access to hospital systems or identifiable patient information. Users should never enter identifiable patient data into the platform.

Authentication

Instructor authentication is handled directly by Microsoft Entra ID using OAuth/OpenID Connect.

LabCharts never receives, stores, or processes Microsoft passwords.

Authentication takes place on Microsoft sign-in pages.

Existing organizational MFA and Conditional Access policies remain in effect.

Microsoft Permissions

LabCharts receives from Microsoft:

Name
Email address, when available
Authentication identifier

LabCharts does not access from Microsoft:

Password
Email
Calendar
OneDrive
SharePoint
Teams
Contacts
Files

LabCharts does not request permission to read or modify Microsoft 365 content.

Participants

Students and course participants do not need an account.

Students participate using only a session code supplied by the instructor.

Participants remain anonymous by default unless an instructor deliberately records identifying information outside the platform.

Students can participate immediately without institutional onboarding or account provisioning.

Data stored

The platform stores:

Instructor authentication information required to access instructor features
Educational session configuration
Simulated laboratory requests
Simulated laboratory results

The platform does not store:

Patient records
Hospital credentials
Microsoft 365 content
Electronic health records

Security reviews

We welcome institutional security reviews, pilot projects and technical questions.

For security-related enquiries, please contact:

security@simcharts.org

Last updated: June 2026