Security
Your patients’ records, kept safe.
We protect your patients’ records the way we would want ours protected. This page says what we do today, and what we do not do yet.
How it works
What protects your data every day.
Encrypted records
Sensitive fields in patient records are encrypted when stored (AES-256-GCM). Data is sent over HTTPS.
Who can see what
Each staff role can only see and do what its permissions allow, at their own hospital.
Record access history
Patient access and record changes produce audit logs. Administrators can review available history by staff member, action and time.
Hospital and patient access
The application checks organisation, branch and patient access. Sharing between hospitals depends on permissions and patient access grants.
Sign-in
Staff sign in with their own account, with sessions that time out. Signing in with your hospital's own login system (SSO) is not available yet.
Standards
Requirements to review before deployment.
We have not been through an outside audit yet. Ask us anything about how we handle records.
Discuss before deployment
HIPAA requirements
Review your organisation’s requirements and any Business Associate Agreement with the team. Product features alone do not establish regulatory compliance.
Nigeria and international use
Data protection requirements
Review the rules that apply to your organisation, including data processing agreements, hosting arrangements and responsibilities, before live use.
Not done yet
Independent audits
We have not completed an independent security audit such as SOC 2 or ISO 27001 yet. We will say so here when we have.
Paperwork
The documents your procurement team will ask for.
BAA and data agreements
Ask us for a Business Associate Agreement or a data processing agreement. We will go through it with your team.
Security questionnaires
Send us your security questionnaire and we will answer it honestly, including what we do not do yet.
If something goes wrong
If a problem affects your hospital's data, we will tell you, explain what happened and what we are doing about it.
Questions about security?
Send us your security questionnaire, or book a short call. We will answer honestly, including what we do not do yet.