Data Flows Overview

System Interaction Map

                    ┌─────────────────────────────────┐
                    │        NHC AWS Account           │
                    │                                 │
  Patients/Users ──▶│  Migrated Apps ──▶ Django API  │
                    │                    (PHI store)  │
                    └────────────┬────────────────────┘
                                 │ HTTPS API calls
                                 ▼
                    ┌─────────────────────────────────┐
                    │        NVS AWS Account           │
                    │                                 │
                    │  Laravel VA Mgmt ──▶ Screenshot │
                    │                      Service    │
                    │                        │        │
                    │                        ▼        │
                    │                 S3 (encrypted)  │
                    └─────────────────────────────────┘

Data Flows in Scope

Flow	Doc	PHI Risk
NVS Laravel → NHC Django API	NVS → NHC	Transit (must be HTTPS)
NVS Screenshot capture → S3	Screenshot Handling	High — screenshots may contain PHI
NHC Migrated Apps → Django API	Internal to NHC account	High