The patient record is attached to the practice, with rights per object type and a scope checked on every access, including for AI features.