Back to Features
Enterprise Security
Each clinic sees only its own patients, prescriptions, bills and lab reports. Staff sign in with a password or a one-time code. Production traffic uses HTTPS. Changes to the chart are recorded. Chart text is not encrypted inside the database, and multi-factor sign-in is not available yet.
How It Looks In Your Dashboard
Security Dashboard
Not SOC 2 certified
Current controls
What is in the product
- Clinic records are not readable by another clinic.
- Production traffic uses HTTPS.
- Chart changes are written to an audit table.
- There is no SOC 2 certificate and no field-level encryption yet.
Security Metrics
Clinic isolationOn
Role-based accessOn
HTTPS in productionOn
Chart change auditOn
Multi-factor sign-inNot yet
Encryption
HTTPS in production
Access Control
Role-based permissions
Audit Logs
Chart writes, not every read