Compliance built into the product, not written into a policy
A fetal-sex field cannot be recorded in a radiology report — it is blocked where the data is entered, not warned about afterwards. An expired medicine cannot be dispensed at the counter. Controlled-drug registers are created automatically on dispensing. Sensitive records are segregated and excluded from bulk export.