Differentially-private synthetic patient data from a Gaussian Copula engine: (ε,δ)-DP synthesis with a per-dataset epsilon budget ledger, DCR/NNDR re-identification risk scoring against a 0.09 threshold with automatic retry, an HMAC-chained HIPAA-style audit log, and JSON-LD provenance certificates. Designed against EHDS requirements. Live on AWS EKS at spe.adraca.io.






Every job is scored with DCR and NNDR re-identification metrics over Gower distance; a job failing the 0.09 risk threshold automatically retries at lower ε, up to three times.
(ε,δ)-differentially-private Gaussian Copula synthesis with a per-dataset epsilon ledger and spending cap, resettable only through a DPO endpoint.
HIPAA-style append-only audit log, HMAC-SHA256-chained with an on-demand verification endpoint, plus a GDPR Art. 17 erasure endpoint.
SDV Gaussian Copula with (ε,δ)-DP noise; Higham nearest-PSD correction keeps correlation matrices valid.
Enforces temporal ordering constraints on generated clinical events.
DCR and NNDR metrics computed over mixed categorical and numeric columns to measure re-identification risk.
Risk above 0.09 triggers automatic re-synthesis with reduced ε, up to three retries, before a job can pass.
CSV/Parquet upload (200 MB cap) to S3; synthesis runs as an async job on a persistent queue.
Gaussian Copula fitted with (ε,δ)-DP noise; ε debited from the dataset's budget ledger.
DCR/NNDR computed against the source; 0.09 threshold enforced with auto-retry at lower ε.
PDF fidelity report and JSON-LD provenance certificate issued; output delivered via presigned S3 URLs.