Security pillars
Deployment security
Security controls depend on the deployment. Ask your clinic for its approved storage, backup, access and privacy arrangements.
Backup and recovery configuration
Encrypted database backup support requires configured keys. Operators must arrange document backups, off-host storage and tested recovery.
Role-based access control
Seven built-in roles plus custom profiles with fine-grained, scoped permissions.
Audit logs
Sensitive actions are logged with actor, target, and timestamp for review.
Integration support
ZATCA Phase 2 (Saudi Arabia) and ETA e-receipt (Egypt) e-invoicing built in.
Data residency
Hosting region and any vendor transfers must be confirmed in your deployment agreement.
Operational practices
Deployment owners must confirm and document these operational practices.
Access, logged
Audit records support review of recorded operations. Coverage and independent, tamper-resistant retention must be verified for each deployment.
If you leave
Data access requests. Contact your clinic to arrange authorized exports and confirm available formats.
Account closure. Agree export access and retention deadlines with your clinic before closure.
Deletion requests. Requests are subject to verified identity, legal retention duties and backup retention schedules.
Need more detail?
Enterprise customers can request our security questionnaire and data-processing agreement.