DenialOS Documentation
DenialOS is a healthcare denial-management and revenue-cycle operations platform. The current product combines denial intake, case management, evidence-aware appeal preparation, payer interaction records, outcomes, revenue-cycle workflows, and governed automation.
Status policy: Documentation reflects repository evidence. IMPLEMENTED does not mean customer-validated or production-enabled.
Start here
- What is DenialOS?
- How DenialOS works
- Getting started
- Denial management
- AI and evidence
- Integrations
- Security
- Hospital onboarding
- Glossary
- Current capability status
Audience paths
| Audience | Start here |
|---|---|
| Hospital / clinic buyer | What is DenialOS?, Hospital onboarding, Security |
| Revenue-cycle team | Denial management, Revenue cycle, Outcomes |
| Integration engineer | Integration architecture, Epic, Canonical data |
| Developer | API, Canonical data, Operations |
| Compliance / security | Security, Trust, AI governance |
Security model
- every customer-bound query is scoped by organization and client, and the database independently enforces the organization boundary with row-level security on tenant tables;
- the runtime refuses to serve from a database connection that can bypass those policies;
- audit records are chained per organization and anchored outside the chain, so truncation, rewriting, reordering, or insertion is detected;
- evidence verification re-reads the stored document rather than trusting its recorded digest;
- every field offered to an AI capability is classified before it is sent.
Start with Security, Tenant and client isolation, and Audit trail integrity.
Current boundary
The repository contains executable integration/runtime foundations for FHIR R4 EHR reads, including Epic, Oracle Health, and athenahealth adapter profiles. Live vendor authorization, customer UAT, and production enablement remain evidence-gated and are not implied by this documentation.
The platform is deployed and in use for the operator's own pilot work. It is not represented here as validated for real clinic or patient data; that gate is customer UAT, which has not happened.