Security
How we keep one clinic's records away from everyone else
Security is designed in at the level where mistakes are hardest to make.
Isolation in the database
Each clinic's records are separated by the database itself, not only by application code. A query that forgets to filter by clinic still can't return another clinic's rows.
Access by role
Reception, doctors, nurses, pharmacists and administrators each see and do only what their role allows. Your clinic administrator decides who has which role.
Our own staff work in a separate system that has no access to your clinic's patient records.
An audit trail on every change
Every change to a record is logged with who made it and when. Signed clinical notes cannot be edited; corrections are added as addenda, so the original stays visible.
Encryption
Data is encrypted in transit and at rest. Passwords and keys are held in a dedicated secrets store, never in code.
Reporting a problem
If you think you have found a security issue, write to us at hello@staging.healthplatform.internal.