Support

PHI-free by construction · read-only

Not “redacted PHI” — none. The difference matters: a redaction pipeline is a filter you can forget to apply. Everything below is a projection built from an explicit field list, so a PHI column added to the schema tomorrow cannot reach this surface by default. A runtime scan runs over the built payload as well, and throws rather than renders if a protected field ever appears.

Tenants

Every edition

Blocked

Cannot serve traffic

Degraded

Serving, with a problem

Telemetry

NONE

Not wired. Cross-tenant telemetry comes from the shared Log Analytics workspace via the edition APIs; neither is reachable from outside the platform VNet.

What support can and cannot see

Visible: tenancy, entitlement, configuration, provisioning state, health and counts. Not visible, on any code path: claimant identity, dates of birth, diagnoses, document contents or extraction output. That is enough to answer “is it broken and why”, which is the job.