Your servers, your region, no egress
Static frontend plus a Supabase backend in your data centre or private cloud. Air-gapped deployments are supported. The only outbound call is the AI provider you choose, and it can be internal.
Feature details
Healthcare & life sciences
Run the programme without the data leaving the building.
Healthcare PMOs ask four questions of any tool: who signs the BAA, is there role-based access, are there audit logs, and where does the data live? Self-hosted Tenon answers the last one with "wherever you put it", and the AI assistant can run on a model inside your own network.
Recommended: Self-hosted Enterprise (on-premises or your private cloud)
4questions every healthcare PMO asks
Will the vendor sign a BAA, does the platform have role-based access, are audit logs available, and does the hosting model satisfy the data residency policy? Self-hosting is described as the cleanest answer to the last.
Source: Project Management for Healthcare IT, Onplana
What goes wrong today
The three problems we hear most from healthcare & life sciences.
- Every SaaS tool is a subprocessorA project tracker that never touches PHI still needs a BAA under most health-system policies. Four tools means four agreements and four annual reviews.
- Programme status is assembled by handEHR rollouts, accreditation prep and quality improvement programmes run across departments, each with its own spreadsheet. The steering slide is out of date the moment it is presented.
- AI is either banned or leakingStaff want an assistant for summaries and drafting. Compliance cannot allow prompts to leave the network. The result is either a ban or shadow use.
How Tenon fits
Four things that change on day one.
AI on a model inside your network
Point Brain at Ollama, vLLM or your inference cluster via an OpenAI-compatible endpoint. Summaries, briefings and draft tickets without a prompt leaving the building.
Feature detailsSSO, sessions, activity logs
SAML or OIDC with your identity provider, enforced. Every member can revoke sessions; admins review per-user activity logs kept in your database.
Feature detailsDepartments as isolated organizations
Quality, IT, Research and each clinical service get their own organization on one deployment, isolated by Row Level Security and administered from one superadmin panel.
Feature details
In the product
What it looks like for healthcare & life sciences.
Programme status, liveEvery department programme in one table, with the at-risk one flagged before the steering meeting.
Rollout timelineGo-live waves per ward, with training and cutover on the same calendar.
Driver diagrams on the canvasSketch the improvement model next to the plan it belongs to.
Three projects, ready to copy
How to set up the board, the fields and the pages.
These are complete configurations, not suggestions. Create the project, add these columns and custom fields, create the pages, and the rituals column tells you which Tenon features carry the week.
EHR module rollout
Coordinate IT, clinical leads, training and go-live support across wards.
Board columns
- Planned
- Build
- Testing
- Training
- Go-live
- Stabilised
Custom fields
- Department (select)
- Go-live wave (select)
- Clinical lead (text)
Pages
- Rollout plan
- Training schedule
- Cutover runbook
- Known issues log
Rituals
Timeline per wave. Daily async standup during go-live weeks with AI digest to the command channel. Stuck flag on Testing tickets reviewed each morning.
Accreditation readiness
Prepare for a survey (JCI, CQC, ISO 15189) with evidence tracked per standard.
Board columns
- Gap identified
- Owner assigned
- Evidence in progress
- Internal audit
- Ready
Custom fields
- Standard reference (text)
- Evidence type (select)
- Due before survey (date)
Pages
- Gap analysis
- Policy index
- Mock survey findings
- Evidence register
Rituals
Portfolio health per chapter of the standard. Weekly AI executive summary to the quality committee. RLS self-test output kept as evidence for the IT controls chapter.
Quality improvement cycle
Run PDSA cycles with measurable outcomes and a record of what was changed.
Board columns
- Plan
- Do
- Study
- Act
- Adopted
- Abandoned
Custom fields
- Measure (text)
- Baseline (number)
- Target (number)
- Cycle (number)
Pages
- Driver diagram (canvas)
- Measurement plan
- Cycle log
Rituals
Driver diagram drawn on the infinite canvas. Each cycle's decision (adopt, adapt, abandon) recorded as a decision card and linked to the measurement page.
A week with Tenon
What Monday, Wednesday and Friday look like.
- Monday: the EHR command channel opens with the standup digest, written by a model running in the hospital's own rack: two wards live, one training session behind, one stuck ticket in Testing.
- Wednesday: the surveyor's pre-visit questionnaire arrives. Tomas answers "where is data stored?" (our data centre), "tenant isolation?" (Row Level Security, here is the self-test output), "SSO?" (Entra, enforced) in an afternoon.
- Friday: the quality committee reads a three-paragraph AI executive summary instead of a 40-slide deck. One decision is needed; it is recorded as a decision card in the committee channel.
Illustrative scenario based on how teams in this sector describe their week.
Questions
Common questions from healthcare & life sciences.
Will you sign a BAA?
For self-hosted deployments Tenon never processes your data, so there is no processor relationship to paper. For Tenon Cloud Business we provide a DPA; ask us about BAA terms for your case.
Can it run with no internet access?
Yes: self-hosted Supabase, a local OpenAI-compatible model, and email/password or SAML authentication against your internal IdP. Nothing requires outbound access.
Where are audit logs kept?
In your Postgres database: per-user activity logs and webhook delivery logs. Stream them to your SIEM like any other database log.
Other industries
Similar problems, different vocabulary.
Set it up for your team this afternoon.
Start free on Tenon Cloud, or self-host it. Copy one of the project setups above and you have a working board in ten minutes.