PDPA-Conscious Security

KampongKares handles medication records, appointment histories, caregiver movements, and household finances. Under Singapore's Personal Data Protection Act, organisations handling health-related personal data must maintain accountability for how it is collected, used, and protected. The platform is designed with PDPA accountability obligations as a first-class constraint, not an afterthought.

Every table in the database has row-level security policies. A caregiver who is a member of one care circle cannot query, read, or modify data belonging to a different circle — even if they know the record's UUID. Session verification and care-circle membership are checked on every server action before any data is touched.

Every mutation to health data — a confirmed medication, a changed appointment, an accepted care-circle membership — writes an append-only audit log row via the database service role. These rows cannot be updated or deleted by any application-layer code. If a dispute arises about what happened and when, the audit trail is intact.

The AI parsing step — the only point where data leaves the platform — receives only the raw prescription text or appointment letter text. It never receives the elder's name, NRIC, date of birth, or any other personal identifier. The structured output is returned and reviewed by a human caregiver before it enters the database.