Your Data Security is Our Top Priority
Patient records stay inside the clinic that created them. This page describes the controls in the product. It is not a SOC 2, ISO 27001, HIPAA, or GDPR certificate.
Comprehensive Security Framework
Our multi-layered security approach ensures your data is protected at every level.
Clinic isolation
A signed-in clinic sees its own patients, prescriptions, bills and lab reports. Public print links require a login.
Sign-in
Staff sign in with a password or a one-time code. Passwords are hashed. Login codes are hashed and locked after repeated wrong tries.
Transport and files
Production traffic uses HTTPS. Lab files are stored on a private disk. Chart fields in the database are not encrypted at rest yet.
Change audit
Creates, updates and deletes of patients, prescriptions, bills and lab reports are recorded, including when a super admin impersonates a clinic user.
Security Performance Metrics
What the product does today. Figures here are product settings, not measured uptime or a third-party audit.
See the controls before you move a clinic onto OPD Care
The security page and the control catalog describe what is in the product today.