UBC — AI Solutions

Audit — Dynamic Documentation Platform

Living documentation that stays in sync with engineering, cloud, AI, and compliance activity. Documents update themselves as the organization changes.

58 of 58 documents
Policy
Fresh
Information Security Policy
Enterprise-wide information security policy establishing governance and controls.
v4.2N. Hebbert
ISO 27001
SOC 2
HIPAA
Architecture
Fresh
PA Intake Service — Architecture
Auto-generated from GitHub `ubc/pa-intake` main branch and Terraform state.
vauto-2026.07.22-14Platform Eng
SOC 2
AI Agent
Fresh
Sarah — Coverage Compass Agent Documentation
Voice agent for pre-enrollment screening. Auto-updated on prompt or tool changes.
vauto-1.4.0AI Platform
AI Governance
HIPAA
SOP
Review due
SOP — Patient Data Access Request
Standard procedure for handling patient data access requests within 30 days.
v2.1GRC
HIPAA
GDPR
Runbook
Fresh
Runbook — Sarah Agent Outage
Detection, triage, and recovery for Sarah voice agent unavailability.
vauto-3.0SRE
SOC 2
API Docs
Fresh
API Documentation — Payer Verification API
Generated from OpenAPI spec at `services/payer-verification/openapi.yaml`.
vauto-OpenAPI 3.1.0Platform Eng
SOC 2
HIPAA
Prompt Library
Fresh
Prompt Library — Screening Intake
Versioned prompts powering Sarah screening flow. Each change captured with eval results.
vv1.4.0AI Platform
AI Governance
Data Dictionary
Fresh
Data Dictionary — pa-cases
Fields, PHI classification, and retention for pa-cases table.
vauto-2026.07.22Data Platform
HIPAA
GDPR
Policy
Stale
Disaster Recovery Plan — Hub Services
RTO/RPO, failover procedures, and quarterly test schedule.
v1.8SRE
SOC 2
ISO 27001
AI Model
Fresh
AI Model Card — gpt-4o-realtime (screening)
Model card for the realtime model powering Sarah screening calls.
vauto-2026.07AI Platform
AI Governance
Release Notes
Fresh
Change Log — Q3 2026
Auto-generated release notes aggregating merged PRs and IaC applies.
vautoPlatform Eng
Policy
Fresh
Access Control Policy
Role-based access, least privilege, quarterly attestation.
v3.0GRC
ISO 27001
SOC 2
HIPAA
Quality Manual
Fresh
UBC Quality Management System Manual
Top-level QMS Manual describing UBC's quality policy, process architecture, and integration of ISO 9001:2015 with CMMI-DEV v2.0 Level 3 practices.
v5.0Quality Director
ISO 9001
CMMI-DEV
ISO 27001
SOC 2
SOP
Fresh
SOP-QMS-04 — Context of the Organization
Defines how UBC identifies internal/external issues, interested parties, and the scope of the QMS (ISO 9001 §4).
v3.1Quality Director
ISO 9001
SOP
Fresh
SOP-QMS-05 — Leadership & Quality Policy
Establishes leadership responsibilities, the Quality Policy, and how roles and authorities are assigned (ISO 9001 §5).
v3.0SVP Operations
ISO 9001
CMMI-DEV
SOP
Fresh
SOP-QMS-06 — Risk & Opportunity Planning
Identifies, evaluates, and treats risks and opportunities affecting the QMS (ISO 9001 §6, ISO 31000).
v2.4GRC Lead
ISO 9001
ISO 27001
SOP
Fresh
SOP-QMS-07 — Resources, Competence & Documented Information
Governs how UBC determines and provides resources, ensures competence, and controls documented information (ISO 9001 §7).
v2.2HR Director
ISO 9001
CMMI-DEV
SOP
Fresh
SOP-QMS-08 — Operational Planning & Control
Defines how UBC plans, executes, and controls operational processes to meet service and regulatory requirements (ISO 9001 §8).
v3.5Operations Director
ISO 9001
CMMI-DEV
SOC 2
SOP
Fresh
SOP-QMS-09 — Performance Evaluation, Monitoring & Internal Audit
Defines monitoring, measurement, analysis, internal audit, and management review (ISO 9001 §9).
v3.2Quality Director
ISO 9001
CMMI-DEV
SOC 2
ISO 27001
SOP
Fresh
SOP-QMS-10 — Nonconformity, CAPA & Continual Improvement
Handles nonconformities, corrective and preventive actions, and continual improvement of the QMS (ISO 9001 §10).
v4.0Quality Director
ISO 9001
CMMI-DEV
SOP
Fresh
SOP-CMMI-CM — Configuration Management (CMMI CM)
Establishes and maintains the integrity of work products using configuration identification, control, status accounting, and audits.
v2.1Release Manager
CMMI-DEV
ISO 9001
SOC 2
SOP
Fresh
SOP-CMMI-MA — Measurement & Analysis
Aligns measurement activities to information needs and delivers objective results for decision-making (CMMI MA).
v1.8Metrics Lead
CMMI-DEV
ISO 9001
SOP
Fresh
SOP-CMMI-VAL — Validation
Demonstrates that a product or component fulfills its intended use in its intended environment (CMMI VAL).
v1.5QA Lead
CMMI-DEV
ISO 9001
AI Governance
SOP
Fresh
SOP-CMMI-VER — Verification
Ensures selected work products meet their specified requirements through peer review, inspection, and test (CMMI VER).
v1.5QA Lead
CMMI-DEV
ISO 9001
SOP
Fresh
SOP-CMMI-PPQA — Process & Product Quality Assurance
Independently evaluates process adherence and product quality; escalates noncompliance objectively (CMMI PPQA).
v2.0Quality Director
CMMI-DEV
ISO 9001
Standard
Fresh
SDLC Master Standard
UBC's Software Development Life Cycle Standard covering all phases from requirements through decommissioning.
v6.0Engineering Director
ISO 9001
CMMI-DEV
SOC 2
ISO 27001
SOP
Fresh
SOP-SDLC-01 — Requirements Engineering
Elicits, analyses, specifies, validates, and manages requirements throughout the lifecycle (CMMI RDM).
v2.4Product Owner Guild
CMMI-DEV
ISO 9001
SOP
Fresh
SOP-SDLC-02 — Architecture & Design Review
Governs architecture decisions, design reviews, and Architecture Decision Records (ADRs).
v3.0Chief Architect
CMMI-DEV
ISO 9001
SOC 2
ISO 27001
SOP
Fresh
SOP-SDLC-03 — Secure Coding & Peer Review
Defines coding standards, secure-coding requirements, and mandatory peer review before merge.
v4.2Engineering Director
ISO 27001
SOC 2
CMMI-DEV
SOP
Fresh
SOP-SDLC-04 — Build, CI/CD & Release Management
Governs how UBC builds, packages, signs, and promotes software through CI/CD.
v3.7Release Manager
CMMI-DEV
ISO 9001
SOC 2
SOP
Fresh
SOP-SDLC-05 — Test Strategy (Unit, Integration, UAT, Regression)
Defines test scope, levels, environments, and exit criteria for every release.
v2.9QA Director
CMMI-DEV
ISO 9001
SOP
Fresh
SOP-SDLC-06 — Change & Configuration Management
Controls every change to production systems through a defined change process (normal, standard, emergency).
v4.1Change Manager
ISO 9001
CMMI-DEV
SOC 2
ISO 27001
SOP
Fresh
SOP-SDLC-07 — Deployment & Rollback
Governs deployment techniques (blue/green, canary, feature flag) and rollback obligations.
v3.3SRE Manager
CMMI-DEV
SOC 2
SOP
Fresh
SOP-SDLC-08 — Post-Deployment Monitoring & Incident Response
Continuous monitoring and incident response for services in production.
v3.6SRE Manager
SOC 2
ISO 27001
CMMI-DEV
SOP
Fresh
SOP-SDLC-09 — Decommissioning
Retires services and their data safely, preserving records required by law and contract.
v1.6Platform Eng Director
ISO 27001
HIPAA
GDPR
ISO 9001
Standard
Fresh
AI-DLC Master Standard
UBC's AI Development Life Cycle Standard, covering intake, data, model & prompt engineering, evaluation, HITL, deployment, monitoring, and retirement.
v2.0AI Platform Director
AI Governance
ISO 9001
CMMI-DEV
HIPAA
GDPR
SOP
Fresh
SOP-AIDLC-01 — Use-Case Intake & Ethical Review
Intakes new AI use cases and reviews them for ethical, legal, safety, and strategic fit.
v2.1AI Governance Council
AI Governance
ISO 9001
SOP
Fresh
SOP-AIDLC-02 — Data Sourcing, Lineage & PHI Handling
Governs how data is sourced, minimized, tracked, and protected — including PHI — for AI development.
v3.0Data Governance Lead
HIPAA
GDPR
AI Governance
ISO 27001
SOP
Fresh
SOP-AIDLC-03 — Dataset Curation, Labeling & Bias Assessment
Curates and labels datasets with quality controls and evaluates for bias.
v1.9ML Engineering Lead
AI Governance
ISO 9001
SOP
Fresh
SOP-AIDLC-04 — Model / Prompt Design & Guardrails
Defines model selection, prompt engineering, tool-calling patterns, and mandatory safety guardrails.
v3.2AI Platform Director
AI Governance
HIPAA
ISO 9001
SOP
Fresh
SOP-AIDLC-05 — Evaluation (Accuracy, Hallucination, Safety, Red-Team)
Runs a standard evaluation battery on every AI release, including red-team attacks and safety probes.
v2.5AI Evaluation Lead
AI Governance
ISO 9001
CMMI-DEV
SOP
Fresh
SOP-AIDLC-06 — Human-in-the-Loop Review & Sign-off
Defines when and how humans review AI outputs before action, with e-signature.
v2.0Clinical Ops Lead
AI Governance
HIPAA
ISO 9001
SOP
Fresh
SOP-AIDLC-07 — Deployment, Canary & Model Registry
Deploys models via the registry with canary and staged rollouts.
v2.2AI Platform Director
AI Governance
CMMI-DEV
SOC 2
SOP
Fresh
SOP-AIDLC-08 — Monitoring, Drift & Feedback Loop
Monitors AI systems for quality, drift, cost, and abuse; feeds signals back into evaluation.
v1.8MLOps Lead
AI Governance
SOC 2
ISO 9001
SOP
Fresh
SOP-AIDLC-09 — Incident, Rollback & Model Retirement
Handles AI-specific incidents, rollbacks, and retirement of models.
v1.7AI Platform Director
AI Governance
HIPAA
GDPR
PM Standard
Fresh
UBC Project Management Standard
UBC's global Project Management Standard, aligned to PMBOK 7 performance domains, PRINCE2 principles, and ISO 21500.
v4.0PMO Director
PMBOK 7
PRINCE2
ISO 21500
ISO 9001
CMMI-DEV
SOP
Fresh
SOP-PM-01 — Project Initiation & Charter
Formal initiation of a project and authorisation via a signed Charter.
v3.1PMO Director
PMBOK 7
PRINCE2
ISO 9001
SOP
Fresh
SOP-PM-02 — Stakeholder Register & RACI
Identifies stakeholders and documents responsibilities via RACI.
v2.5PM Guild
PMBOK 7
ISO 9001
SOP
Fresh
SOP-PM-03 — Scope, WBS & Change Control
Defines scope, decomposes work via WBS, and controls scope changes.
v3.0PM Guild
PMBOK 7
PRINCE2
ISO 9001
CMMI-DEV
SOP
Fresh
SOP-PM-04 — Schedule & Milestone Management
Builds the schedule, tracks progress, and manages critical path and float.
v2.8PM Guild
PMBOK 7
ISO 9001
SOP
Fresh
SOP-PM-05 — Cost, Budget & Financial Controls
Governs project budgets, forecasts, actuals, and financial controls.
v2.6Finance Business Partner
PMBOK 7
ISO 9001
SOC 2
SOP
Fresh
SOP-PM-06 — Risk & Issue Management
Identifies, assesses, treats, and tracks project risks and issues.
v3.2PM Guild
PMBOK 7
PRINCE2
ISO 9001
SOP
Fresh
SOP-PM-07 — Communications & Reporting Cadence
Defines who receives what information, when, and in what format.
v2.4PM Guild
PMBOK 7
ISO 9001
SOP
Fresh
SOP-PM-08 — Vendor & Contractor Management
Selects, contracts, onboards, and manages third-party vendors and contractors.
v2.7Procurement Lead
ISO 9001
SOC 2
HIPAA
GDPR
SOP
Fresh
SOP-PM-09 — Quality Assurance & Deliverable Acceptance
Assures quality of deliverables and captures client acceptance.
v2.2Quality Lead
PMBOK 7
ISO 9001
CMMI-DEV
SOP
Fresh
SOP-PM-10 — Project Closure & Lessons Learned
Closes projects, captures lessons learned, and feeds them back into organisational learning.
v2.0PM Guild
PMBOK 7
PRINCE2
ISO 9001
PM Standard
Fresh
Assignment & Resource Allocation Standard
Standard for assigning people to work: role catalog, capacity model, allocation matrix, and conflict resolution.
v2.3Resource Manager
PMBOK 7
ISO 9001
CMMI-DEV
PM Standard
Fresh
Global PM Alignment — PMBOK 7, PRINCE2, ISO 21500
Maps UBC PM Standard terminology and processes to global frameworks for international engagements.
v1.4PMO Director
PMBOK 7
PRINCE2
ISO 21500
ISO 9001