Security
Patient data is the point. Protecting it is the job.
What we do, specifically, so that a hospital can trust its record to us.
Controls
- 01
Isolation per customer
Each hospital gets its own database, cache, application processes and resource limits. One customer's load or fault cannot touch another.
- 02
Encryption everywhere
TLS 1.3 with HSTS on every connection. Secrets, tokens and backups encrypted at rest.
- 03
Access control
Role and permission based access to the field level, two-factor login, sign-in history with location and device.
- 04
Audit trail
Every clinical, financial and administrative change is logged with who, when and what, and cannot be edited.
- 05
Backups you can restore
Nightly encrypted backups with an off-site copy, and restores that are actually tested.
- 06
AI inside the fence
Speech, language and vision models run on our own servers. Identifiers are removed before inference. Nothing is used for training.
- 07
Secure development
Built and reviewed against OWASP ASVS, dependency scanning, strict content security policies, rate limiting and abuse protection.
- 08
Responsible disclosure
Found something? Write to our security contact and we will respond within two working days.
Need the detail for procurement?
We provide architecture documents, data flow diagrams and a security questionnaire response.