Every AI control applies at the workflow boundary, not only in the interface. Direct endpoints are protected so an unlicensed or unreviewed request cannot bypass the visible experience.
Consent before generation
The clinical workflow requires documented patient-consent attestation before an AI draft can be generated.
Draft-only output
AI output is labeled unverified. A clinician must review and correct every fact before anything can be created.
Exact human approval
Saving an AI-assisted visit requires the explicit review confirmation, the same user, and the same patient encounter.
Tenant and license isolation
The page, generation, template, and save endpoints fail closed unless the signed tenant license includes the AI entitlement.
Durable audit evidence
Generation, user, encounter, review, acceptance, model usage, and workflow status are recorded for authorized review.
No autonomous clinical actions
Care Axis AI does not independently diagnose, order, prescribe, sign, bill, message, or approve clinical or financial actions.