Resident, care plan, ledger, shift, property, and entity records preserve source context while operator-declared definitions, authority, reconciliation, and lineage determine what governs each decision.
When systems disagree, the operator governs.
The industry has been told for two decades that senior housing & care requires 8–12 systems wired together — an EHR for clinical, a PMS for real estate, a CRM for move-ins, a scheduler for staff, a portal for families, an accounting connector for finance, and a BI tool for the board. Each may remain authoritative within its domain. The harder problem appears when legitimate systems disagree and a consequential decision requires one applicable definition.
SeniorCRE is built on a different first principle: the entities that exist in a senior housing & care operation are knowable, finite, and shared across every workflow. A resident is the same resident in clinical, billing, and family communication. A shift is the same shift in scheduling, payroll, and agency spend. A property is the same property in operations and in the REIT covenant. If those entities are knowable, the operator can govern their definitions, source authority, exceptions, effective periods, and lineage without surrendering control to a vendor-created version of truth.
Epic organized healthcare around the patient record. SeniorCRE organizes senior housing & care around the operating record.
CANONICAL · ENTITIES
SeniorCRE-native functions use a governed schema for these eight entities. Retained systems keep their source records; the operating record preserves their context and applies operator-declared authority when they disagree.
ARCHITECTURE · AS · MOAT
Vendor changes can create mapping, reconciliation, and migration work. An Operator-Controlled Operating Record makes the governing definitions, authority rules, exceptions, and lineage portable: the operator controls the record and its export. Vendor change remains a procurement decision rather than an unrecorded change in enterprise meaning.
Cross-functional decisions depend on data that lives in multiple legitimate systems. Connecting or matching those records supplies context; it does not establish authority. The operator declares which definition and source govern each decision, and the operating record preserves the alternate valid value and authority lineage.
GOVERNANCE · IN · SCHEMA
multi-layer tenant isolation is enabled on every public table. Access is mediated by server-side access helpers functions tied to the authenticated session and the operator hierarchy. A role enum gates every mutation. Tenant isolation is enforced at the database layer, not the application layer — meaning a bug in application code cannot leak data across operators. The immutable audit log is append-only at the schema level and is the evidence base for state survey and SOC 2 future assurance reporting. SeniorCRE does not claim SOC 2 certification or its own SOC 2 report.
Status as of September 29, 2026 (last modified 2026-09-29)
| Claim | Evidence step | What is true today | Proof to inspect |
|---|---|---|---|
| Operator and portfolio workspace foundation built (roles, hierarchy, entity tree). | Validated | Provisioning controls have been exercised repeatedly in controlled SeniorCRE conditions, including the operator onboarding wizard. Not yet performed for an operator in production; no standard duration is published. | Control test record; synthetic or de-identified data; no operator PHI. |
| Single-community acceptance boundary. | Architecture designed | A gate sequence derived from the migration and acceptance model. No community has gone live for an operator, so no observed duration exists. | Written deployment plan and acceptance-gate model. No execution record exists. |
| Portfolio-wide rollout acceptance across multi-community scope. | Architecture designed | A wave-cadence model from the deployment plan. Sequencing depends on community count, system count, data condition, source access, and operator authority decisions. Not a completed rollout. | Written deployment plan and acceptance-gate model. No execution record exists. |
| Connectors to PointClickCare®, MatrixCare®, Yardi®, and QuickBooks®. | Validated | Ingestion and normalization exercised against synthetic and de-identified extracts in controlled SeniorCRE conditions. No third-party integration is live in operator production. | Control test record; synthetic or de-identified data; no operator PHI. |
| Operator-Controlled Operating Record: source authority, reconciliation, field-level lineage. | Architecture designed | The Operator-Controlled Operating Record is designed and not yet implemented in any community. Authority rules, reconciliation, and field-level lineage are design intent; synthetic examples do not establish working governance. | Written deployment plan and acceptance-gate model. No execution record exists. |
| Clinical configuration: SeniorCRE as clinical system of record, or alongside an incumbent eMAR read one direction only. | Architecture designed | Designed, not built for operator use. SeniorCRE's native medication administration and eMAR are roadmap and not built; the read-only configuration alongside an incumbent eMAR depends on the Operator-Controlled Operating Record, which is designed and not yet implemented in any community. One authoritative medication record at all times is a design rule. | Written deployment plan and acceptance-gate model. No execution record exists. |
| Barcode-verified administration with an automated five-rights check at the point of medication pass. | Architecture designed | Not built. Corrected September 7, 2026: earlier pages, operator training guides, and generated answers described this control as running, which was false. Implementation boundary: four of the five medication scan surfaces open a camera preview with no decoder and match only a manually typed NDC; one mobile surface decodes frames through the browser-native BarcodeDetector API where the browser supports it (Chromium/Android; not iOS Safari, not most desktops) and compares the NDC alone. No decoding library is bundled, no surface verifies resident, dose, route, or time, and no scan result blocks an administration. The five rights are verified by the administering clinician, not by SeniorCRE. | Build-queue entry with scope and dependencies. No implementation exists. |
| Live write-back into operator payroll and scheduling systems. | Architecture designed | Specified and in the build queue. Read-side ingestion only today. | Build-queue entry with scope and dependencies. No implementation exists. |
| Implementation effort required from the operator. | Architecture designed | Deployment is staged, not effortless: platform access, source access, authority rules, reconciliation, security review, and any history migration are scoped work with operator-side effort. Any claim of zero implementation would be false. | Written deployment plan and acceptance-gate model. No execution record exists. |
Status and evidence class as of September 29, 2026. SeniorCRE has no operator-production deployment. Public timing is gate-based and operator-specific; no standard go-live duration is published. Maintained and reviewed by John Hauber, Founder, SeniorCRE, LLC. A medication-safety control was described on earlier pages as running when it was not; that correction is published in full at /medication-safety-claim.
| Capability | SeniorCRE | Integration / iPaaS | Best-of-Breed Stack |
|---|---|---|---|
| System of record | Governed representation | Each source system | 8–12 source systems |
| Reconciliation work | Governed by decision context | Sync conflicts to resolve | Manual reconciliation |
| Vendor churn risk | Operator owns authority rules | Re-map on every change | ~18-month half-life |
| Cross-functional outcomes | Governed by decision context | Requires custom ETL | Manual BI |
| Tenant isolation | Database-layer tenant isolation | App-layer only | Per-tool variation |
| Audit trail | Immutable, append-only | Per-source, partial | Fragmented or absent |
| Data export / sovereignty | Operator-controlled full export | Vendor-gated per source | Per-tool, often blocked |
Spin up a tenant-isolated schema with tenant isolation, server-side access helpers, granular role-based access, and the immutable audit log on day one.
Built ingestion maps operator-provided records into resident, care plan, ledger, shift, and property evidence. Named-vendor connectors remain roadmap and are not live in operator production.
Clinical, financial, workforce, compliance, and investor modules read governed values with source authority, reconciliation state, and lineage. Retained systems may remain authoritative by operator declaration.
Property → Region → Operator → Holding Co rollups preserve definition, source authority, reconciliation state, and lineage rather than being assembled in BI without context.
Existing systems may remain in place, or SeniorCRE may assume selected system-of-record functions where the operator chooses that configuration. No completed operator-production cutover is claimed.
SeniorCRE is the operating, compliance, and asset-management layer for REITs, family offices, and institutional capital allocators in senior housing & care.