⚠ IRB PPRN-001-2025 · MD · RESEARCHER · DEATH OPTIONAL ⚠
🔒 PEPTIDEPURE · CLINICIAN-VERIFIED · HIPAA-AWARE REGISTRY · NPI REQUIRED · MORTENSEN MEDICAL
/ PURE · CLINICIAN ACCESS
🔒 CLINICIAN-ONLYHIPAA-AWARENPI-GATEDAUDIT LOGGED

PURE.

“The tools the pharmacy won't let your patient buy over the counter.”

A clinician-verified channel for the Schedule-IV-adjacent, weight-management, hormone-optimizing, and cognitive-enhancement peptides that can't run through an OTC pathway. Verified prescribers only. NPI on file. Every access event logged.

Fulfillment routes through peptidepure.com. This page is the gate.

// ACCESS REQUEST

VERIFY YOUR NPI.

10-digit National Provider Identifier, state of licensure, and the email address on file with your board. We cross-check against the CMS NPPES registry before provisioning access. No scrapes. No sales lists.

Verification typically completes within one business day. A human at Mortensen Medical reviews every request.
// SECURITY POSTURE

HOW THIS GATE ACTUALLY WORKS.

For Matt, Zlatin, and any clinician who wants to see the receipts before they hand us an NPI. Architecture documented, not aspirational.

🔐
ENCRYPTION AT REST & IN TRANSIT

TLS 1.3 edge to origin. Supabase Postgres at rest: AES-256. PHI columns (NPI, license, email) stored in a dedicated phi schema with row-level security and column-level encryption keys rotated quarterly.

📜
IMMUTABLE AUDIT LOG

Every verification request, access grant, and gated-page view writes to an append-only audit_events table. WORM-configured. Seven-year retention. Queryable by the registry IRB officer, nobody else.

🧬
NPI VERIFICATION · CMS NPPES

Server-side match against the public CMS NPPES registry. Name + taxonomy + state of licensure. No PDF upload, no ID scans — we don't store what we don't need.

🛡️
MINIMUM NECESSARY · HIPAA 164.502(b)

No patient data on this platform. Zero PHI, by design. Clinician credentialing only. Patient-facing dosing stays with the prescriber, at the prescriber's EHR, under the prescriber's BAA.

🔑
SSO · ROLE-BASED ACCESS

Supabase Auth with magic-link + optional TOTP. Clinician role grants read-only access to 🔒 KILLs, dosing cards, and the Pure catalog. No write access to registry or forum data.

📍
ANOMALY & RATE LIMITING

Per-IP rate limits on the verification endpoint, automated credential-stuffing protection, and email notifications on unusual access patterns. Full logs to the registry IRB reviewer on request.

// GATED CATALOG

🔒 CLINICIAN-ONLY PROTOCOLS.

Visible from the outside so patients know what exists. Accessible from the inside once your NPI is verified.

🔒 #03 · METABOLIC
FAT KILL

“The GLP-1 conversation your cardiologist wishes you'd had five years ago.”

Tirzepatide · Retatrutide · Cagrilintide
🔒 #06 · HORMONAL
LIBIDO KILL

“The tools people are most embarrassed to ask their PCP about.”

PT-141 · Kisspeptin · Oxytocin
🔒 #07 · PERFORMANCE
STRENGTH KILL

“Muscle preservation and regenerative performance in the aging athlete.”

CJC-1295 · Ipamorelin · MK-677 · Testosterone optimization
FOR CLINICIANS. BY CLINICIANS.

If you're already verified on peptidepure.com, skip the gate. If you're a researcher, collaborator, or AI/security consultant looking at this for the architecture, get in touch — we're hiring.