Skip to main content

Security and data

Security claims must follow evidence

PHARMORIS cannot be presented as buyer ready until tenant isolation, server derived authority, source rights, migration, restore and exact release identity can be evidenced.

Request current security contextReview the architecture doctrine
Current scope | No patient identifiable dataIntegration boundary | No EPR write backReadiness | Security evidence remains a gate

Current data boundary

Keep the current product scope narrower than the long term ambition.

The current PHARMORIS scope excludes patient identifiable data, patient facing functionality and EPR write back.

Any future expansion requires a separate evidence, security, governance and assurance decision.

01

Data scope

Use only the data categories authorised for the defined non production scope.

Current boundary
02

Source rights

Confirm that each source can be used for the intended purpose.

Required
03

Provenance

Retain enough context to identify where a visible claim or signal came from.

Required

Security authority

Identity, tenant and role decisions belong on the server.

Client side assertions must not determine tenant scope or protected authority. Authentication that is synthetic or bypassable is a release no go condition.

01

Authenticate

Establish a trusted user identity for the exact environment.

02

Authorise

Derive tenant and role permissions from server side policy.

03

Record

Retain the actor, action, source context and product version for review.

Release gate

Do not substitute security language for security proof.

Buyer readiness remains blocked where critical risk is open, the deployed version cannot be identified, or migration and restore cannot be evidenced.

Human decision requiredProceed only inside an evidenced and governed scope.
01

Exact release

Identify the precise product version and environment under review.

02

Test evidence

Retain results for the controls and failure paths relevant to the intended scope.

03

Recovery evidence

Demonstrate migration, backup and restore before making resilience claims.

Classified public record

Open the classified public record

ANALYSIS + EVIDENCE BOUNDARY

Read the argument. Verify the product separately.

Published analysis can explain why governance matters. It cannot evidence security, clinical authority, certification, product readiness or local approval. Use the dated NEUVIOR records for that.

  1. AI Ethics Now / University of Warwick IATLPodcast appearance

    AI and Accountability: When Does a Suggestion Become a Decision?

    Varun Sharma joins AI Ethics Now to examine false confidence, human responsibility and the point where AI assisted suggestions become accountable decisions.

    Hear where an AI suggestion becomes a decision
  2. TechRadar ProContributed opinion

    Five questions to test whether an AI stack is truly under your control

    In TechRadar Pro, Varun Sharma sets out five tests for enterprise AI control across provenance, infrastructure, legal authority and safe exit.

    Test provenance, control and safe exit
  3. NEUVIOR InsightsNEUVIOR analysis

    From pilot theatre to financial grip: how NHS CFOs should evaluate AI in medicines optimisation

    NHS finance leaders do not need another AI pitch. They need a disciplined way to decide whether a technology can release value within the financial rules they are already being held to.

    See how a finance leader should test an AI claim
Read the governance arguments

NEUVIOR Insights and After Publication reflections are company or founder analysis. Publisher records evidence publication, not endorsement, adoption, product readiness, savings or clinical outcomes.

Make the next step useful

Bring the problem that needs a clearer decision.

Tell us what is stuck, what decision you need to make and what a better outcome would change. We will connect you to the most relevant NEUVIOR, PHARMORIS, media or investor route.

Request current security contextSpeak with NEUVIOR

QUESTIONS · ANSWERED DIRECTLY

The useful answers, in one place.

Browse every question
01What is NEUVIOR?

NEUVIOR is a pharmaceutical company registered in Scotland. It is building capabilities across medicines intelligence, governed technology and longer term development. PHARMORIS is its immediate product priority.

02What does NEUVIOR build today?

NEUVIOR is developing PHARMORIS, a human-governed medicines operations system in controlled, non-production development. It is intended to connect evidence, decisions, accountable work and value review. No independent TRL, deployment, customer adoption or clinical validation is claimed.

03What is PHARMORIS by NEUVIOR?

PHARMORIS is a configurable medicines operations system under controlled development. It is designed to help authorised teams progress medicine opportunities from evidence linked to its source, through an owned ActionCase, a human decision, delivery and review.

04Who founded NEUVIOR?

Varun Sharma is the Founder, CEO and CTO of NEUVIOR and leads the company and PHARMORIS product architecture.

05Where does NEUVIOR have a presence?

NEUVIOR works across Glasgow, London and Mumbai. Glasgow is the company origin and registered Scottish base. London supports commercial activity led by the founder. Mumbai supports market engagement in India and relationships across the pharmaceutical sector. These are different forms of presence. They do not imply three registered offices or regulated facilities.