Health systems

Data warehouse migration for health systems

Health systems need the code and the data to stay inside their own environment. Novuz runs there, air-gapped if needed, with a local model for the edge cases, and produces a reconciliation report for every converted object. For HIPAA change-control evidence, see /for-audit.

Where it runs

Does any code or data leave our environment?

Novuz runs as a Docker container or VM inside your own cloud account or data center. It needs no outbound connection and can run air-gapped, so code and data stay inside your environment, under your access and logging controls.

Models

Where is a language model used, and which one?

Only in the resolver, for about 5% of objects. About 95% convert by fixed rules with no model call. For the rest you choose the model: a local model through Ollama keeps every edge-case proposal inside your environment. An engineer approves each proposal, and the decision is logged.

Assessment

Can we run the assessment without sharing code?

Yes. A discovery container runs inside your network and you send back only the report. If you prefer to share code under NDA instead, it is deleted 30 days after the readout unless an engagement follows.

Evidence

What evidence does Novuz give our compliance team?

Evidence per change, for every object:

  • what each object became;
  • the rule version that converted it;
  • any resolver proposal, with the engineer who approved it;
  • a reconciliation report on the same inputs.

Novuz does not certify compliance; your own controls do. It produces the evidence per change, and your compliance team maps it to the requirements that apply to you.

Next question

Where to read next

For HIPAA change-control evidence, see the audit page.

FAQ

Frequently asked questions

Can Novuz run air-gapped?

Yes. Novuz runs as a Docker container or VM with no outbound connection, and updates arrive as signed images you pull on your own schedule. A local model through Ollama keeps the resolver inside your environment too.

Do we need a data processing agreement with Novuz?

Usually a narrower one, because Novuz does not receive or process your data when it runs on your infrastructure. Your counsel decides what it must cover.

Does Novuz certify regulatory compliance?

Novuz does not certify compliance; your own controls do. It produces the evidence per change, and your compliance team maps it to the requirements that apply to you.

Sources and further reading

How we measure: Methodology

Written by Debjani Dhar, Co-founder and CEO, Novuz · Technical review: Ted Ghose, Co-founder and CTO, Novuz

Last reviewed:

Find out what your logic debt is costing you.

Every object counted, lineage, dead code and a fixed price in three business days. $3,000, credited.

Take the logic debt scorecard

Not sure which door? The scorecard takes ten minutes and tells you.

Scorecard