Security
Last updated:
stores clinical records, so security is part of the product. This is what we guarantee.
Where your data is
- On servers in the United States, with automatic backups.
- Every connection travels encrypted.
- Data and files are stored encrypted. Clinical text, contacts and document numbers also have an encryption layer of their own for each clinic.
Isolation and access
- Each clinic is isolated: everything you store belongs to your clinic, and another clinic never sees your data.
- Your clinic decides what each profile sees (for example, doctor, assistant, administration) and who each patient is shared with.
- Ibu follows the same permissions: it only sees what the professional who asks can see.
Accounts
- Two-factor authentication with a code app. The clinic can require it for the whole team.
- The session closes itself after a period without use.
Access log
- It is recorded who saw or changed each record, and when. That log cannot be altered.
- Technical logs never store health data.
Artificial intelligence
- Ibu runs on AI models with zero data retention (ZDR): what we send them is not stored and is not used for training.
- We never train models with data from clinics.
- Ibu proposes and the professional confirms: no change is saved without that confirmation.
Report a problem
If you find a vulnerability, write to hola@heydoc.cc before you publish it. More about how data is handled in Health data and Privacy.