Stellar Health

Customer code: STELLAR. Account owner: Frank Delgado (VP Delivery). Delivery lead: Henry Brandt (Project Manager), with Isha Patel as solution architect.

Stellar Health is a healthcare provider network and our longest contract: a 5-year MSA with a long notice period. Because the work touches health information, it carries the strictest data protection rules of any customer.

Engagement summary

Northwind is building a patient scheduling and referral integration platform for Stellar Health, connecting clinic systems with a central scheduling service. Work includes design, secure integration and support. Because of the sensitivity of the data, the team is small, access is tightly controlled and reviewed, and all engineers complete additional training.

Contract terms (summary)

Term Value
Payment 30 days
Term 5 years
Notice to terminate without cause 120 days
Liability cap 2x fees
Confidentiality 7 years
Extra HIPAA-style data protection addendum

The confidentiality period of 7 years is the longest of any customer. The data protection addendum sets obligations for handling health data. The signed MSA-STELLAR and the addendum are authoritative.

What the data protection addendum means for you

  1. Only people named on the access list may touch Stellar data. Request access via Request access; expect an additional approval.
  2. MFA is mandatory for everyone under POL-IT-003, and for Stellar environments you must use it on every login.
  3. Never copy Stellar data to a laptop, a test environment or a personal device. See Coding standards.
  4. Report any suspected exposure immediately; this is a P1 under SOP-001 and must be acknowledged within 15 minutes. See Report an incident.
  5. Ask Legal (Marcus Webb) before sharing any Stellar information outside the team.

Working with Stellar

  • Allow extra time for security reviews in estimates, see Estimation.
  • Escalations about data go to Erin Oduya (IT Security Manager) as well as the delivery manager, see Customer escalation.
  • Access reviews for this account are held every 6 months as for all systems (SOP-IT-003).

Contacts

Role Northwind person
Account owner Frank Delgado
Project manager Henry Brandt
Solution architect Isha Patel
Security Erin Oduya
Legal Marcus Webb

Owner: Frank Delgado - Last updated: 2026-08-12