Health care and social assistance
Provider organizations need to know whether Salesforce exposes more patient information than intended. We check who can view, export and report on records containing health details, whether field history and event monitoring cover sensitive fields, and whether community or portal users can reach anything beyond their own data. We also look for referral and intake flows that copy clinical details into free-text fields, a frequent source of unplanned exposure. Where we find it, we recommend structured fields or a link back to the source system instead.