Encrypted fields
The fields the platform encrypts before they reach storage — the platform-wide floor every tenant inherits. Sign in to see your tenant's resolved set, which adds your zone's overlay and your own private IG profiles on top.
Platform-wide catalogue — 16 declaration(s) across 2 resource type(s). Zone and tenant overlays are not applied at this view.
Communication
| Element path | Protection |
|---|---|
Communication.payload.contentString
|
encrypt-at-rest |
Communication.payload.contentAttachment.data
|
encrypt-at-rest |
Communication.note.text
|
encrypt-at-rest |
Patient
| Element path | Protection |
|---|---|
Patient.name.family
|
encrypt-at-rest |
Patient.name.given
|
encrypt-at-rest |
Patient.name.prefix
|
encrypt-at-rest |
Patient.name.suffix
|
encrypt-at-rest |
Patient.name.text
|
encrypt-at-rest |
Patient.telecom.value
|
encrypt-at-rest |
Patient.address.text
|
encrypt-at-rest |
Patient.address.line
|
encrypt-at-rest |
Patient.address.city
|
encrypt-at-rest |
Patient.address.district
|
encrypt-at-rest |
Patient.address.state
|
encrypt-at-rest |
Patient.address.postalCode
|
encrypt-at-rest |
Patient.identifier.value
|
plaintext-explicit |
Source: FHIR Implementation Guide profiles. Anonymous visitors at
/docs/security/sensitive-fields/ see the platform-wide catalogue. Per
ADR 0002.