How we protect data
A plain description of the safeguards, for doctors who are — rightly — cautious about putting their patients into someone else’s system.
Encrypted in transit and at rest
TLS everywhere, and patient identifiers encrypted in the database with a key held outside it.
This website holds no patient data
The site you are reading handles subscriptions only. Patient records live in a separate, login-gated system that this site can create an account on and nothing more.
Every access is logged
Reads as well as writes, in an append-only record — including access by our own support staff.
Nothing in a notification
A reminder on a lock screen says a reminder is waiting. It does not name a medicine.
Export and erasure
Patients can take their data with them, or have it removed.