The public website should capture business leads, not clinical content. Demo and contact forms should ask for metadata such as name, work email, organization, and role.

Clinical chart content belongs only in the authenticated application paths that are designed for PHI handling.