How We Protect Your Hospital's Data

Every hospital's data is kept separate

Each record belongs to one hospital. The software checks this on every request, so staff of one hospital cannot see another hospital's patients, bills or stock.

Role-based access

Every person gets their own login and a role such as Hospital Admin, Branch Admin, Doctor, Nurse, Receptionist, Pharmacist or Accountant. Each role sees only what the job needs. A doctor sees their own patients by default, and financial reports are limited to the roles you allow.

Personal logins and protected passwords

Passwords are stored in a scrambled (hashed) form, never in plain text. Password reset links are sent by email and expire.

Encrypted in transit

The whole site runs over HTTPS, and browsers are told to always use the secure version. We also send standard browser protection headers.

Hosted in India

Your data is stored on servers in India.

Activity records

Changes to key records, such as appointments, are logged with who made them and when.

Your data is yours

We never sell or share hospital data. If you leave, we give you a full copy of your patients, bills and stock on request.

The public demo is separate

The live demo runs on a separate demo hospital with made-up patients. It is reset every night and never holds real patient data.

What we ask of your team

• Use a strong password and do not share logins
• Remove or deactivate staff accounts when someone leaves
• Lock shared computers when you step away
• Tell us straight away if you think an account has been misused