Data Security & Encryption
Every piece of patient data is protected with AES-256 encryption at rest and TLS encryption in transit. We use industry-standard protocols to ensure your data remains confidential and secure.
🔐 Encryption at Rest
- AES-256 encryption for all stored data
🌐 Encryption in Transit
- HTTPS-only connections
- Secure API endpoints
🔑 Access Controls
- Role-based access control (RBAC)
- Web session timeout and secure logout
Healthcare Compliance
PhysiologicPRISM is designed with privacy and security safeguards to support healthcare use.
🏥
Healthcare Privacy & Security
Designed with privacy and security safeguards to support healthcare use, including role-based access controls, encryption in transit, session timeouts and audit logging.
🇪🇺
Built to support GDPR requirements
Supported by role-based access, audit logs, data export and account deletion.
📋
Audit Logs
Audit log entries are recorded for sign-ins, security events, record changes, exports and some record views.
Cloud Infrastructure
Hosted on Microsoft Azure, PhysiologicPRISM runs on Microsoft's cloud infrastructure.
☁️ Microsoft Azure
- Enterprise-grade infrastructure
- Microsoft Azure BAA in place
- Azure holds ISO 27001 and SOC 2 certifications (Microsoft's certifications, not PhysiologicPRISM's)
Privacy & Data Ownership
Your data belongs to you. We maintain strict privacy standards and give you complete control over your patient information.
👤 Data Ownership
- You own 100% of your patient data
- Export your data anytime in standard formats
- No vendor lock-in
- Right to data deletion
🔗 Data Sharing
- We never sell your data
- Website and product analytics: Google Analytics and PostHog (see our Privacy Policy)
- Minimal third-party integrations
- Transparent data usage policies
📊 Patient Consent
- Consent records for SMS and WhatsApp messaging
- Granular permission controls
- Audit trail of messaging consent changes
Secure Clinical Documentation
Try PhysiologicPRISM free for 14 days
Start Free Trial