Skip to content

Security

Hospital-grade security, plainly stated.

Everything on this page ships in the platform today. Nothing aspirational, nothing vague — and your IT team can verify each item on a live instance.

Account security

  • Two-factor authentication with authenticator apps (TOTP) and one-time recovery codes
  • Strong password policy, including a compromised-password check on set
  • Password changes require the current password and revoke every other active token
  • Deactivating an account revokes all live tokens immediately
  • Layered rate limiting on authentication and the API

Clinical governance

  • Clinical records are append-only — amendments supersede, never overwrite, and every version stays readable with authorship
  • Break-glass access for emergencies is always available and always audited
  • Separation of duties enforced in code: discount approvers can’t approve their own requests, leave can’t be self-approved, merge sign-off excludes the requester
  • Server-owned state machines: encounters, orders, invoices, and claims only move through the transitions the server advertises
  • Acuity downgrades in the ED require a stated reason

Data protection

  • Patient identifiers, insurance member numbers, and staff licence numbers are encrypted at rest with per-purpose blind indexes for lookup
  • Sensitive numbers render masked (last four) everywhere they appear — never in clear text, never in the audit log
  • A dedicated database per facility — no shared tables between institutions
  • In-app notifications carry PHI-free pointers only — titles and references, never clinical content
  • Patient documents are stored under server-generated names on private storage, checksummed, and every download is an audited PHI read

Audit & operations

  • A hash-chained (tamper-evident) audit log covering privileged actions and PHI reads — including patient-portal logins
  • Platform-level audit of provisioning and platform sign-ins, kept separately from facility data
  • Health checks with incident acknowledgement, and maintenance windows so planned downtime never pages anyone
  • Backup runs with restore tests that require evidence — an unverified restore is a hope, not a backup
  • Reporting exports are queued and delivered via expiring signed links

Procurement & review

Bring your security checklist.

IT reviews are welcome. During evaluation we’ll walk your team through authentication flows, the audit log, break-glass, PHI encryption, and the API — on a live instance, not a slideshow. Accessibility matters too: the product interface is continuously checked by an automated accessibility test suite (labels, headings, focus management, contrast-audited themes).

Schedule a technical review Read the FAQ

Your IT team will have questions. Good.

Bring them to a technical walkthrough — we answer on the live platform.

Request a demo Talk to us