Healthcare products require particular attention to privacy, security and regulatory requirements. We define applicable requirements, data flows, third-party dependencies and responsibilities before development begins. Formal regulatory certification, independent security audits and legal compliance assessments are not included unless separately agreed.