generated: '2026-07-20'
method: derived
source: openapi/medigo-openapi-original.yml
# Which cross-cutting standards the MEDIGO API V2 conforms to, derived from the
# OpenAPI. No published certification/compliance program (SOC 2, ISO 27001, HIPAA,
# etc.) was found on the accessible provider surface, so no `Compliance` pointer
# is emitted.
standards:
- id: openapi-swagger2
  conforms: true
  evidence: spec is Swagger 2.0 (openapi/medigo-openapi-original.yml)
- id: apikey-bearer-auth
  conforms: true
  evidence: securityDefinitions partner_token type apiKey in header Authorization (Bearer)
- id: oauth2
  conforms: false
- id: openid-connect
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: errors use a plain {code, message} JSON envelope, not application/problem+json
- id: json-api
  conforms: false
- id: webhooks
  conforms: true
  evidence: webhooks tag + POST /webhooks/{id}/trigger/{event} with a documented event catalog
- id: fhir
  conforms: false
  evidence: no FHIR resource shapes in definitions