Security
Built for health data from day one
Patient records are special category data under UK GDPR. These are the protections every practice gets, on every plan.
Your practice only
Every request is limited to your own practice's data, checked twice, and tested against attempts to reach another practice's records.
Two-factor for everyone
Every account signs in with a password and an authenticator app. Strong passwords, checked against known breaches, and automatic sign-out after 30 minutes idle.
Encrypted everywhere
HTTPS only. Data is encrypted on disk, and sensitive patient fields such as NHS numbers and notes are encrypted again in the database.
UK and EU hosting
Your data is stored in the United Kingdom. Emails go through the EU and texts through Ireland.
A full audit trail
Who changed what and when, every time a patient record is opened, every download and every export.
We can't see your patients
Our own support tools show accounts and system health only. There's no way for our staff to sign in as you.
Safe online booking
Patients never see each other's details, the booking form is protected against spam, and every chosen time is checked again before it's booked.
No double-bookings
Each booking locks that optician's diary while it's made, so two people can never take the same time.
Data protection tools
Subject access requests, erasure and restriction in a few steps, a retention policy that runs itself, and records the law requires kept safely.
Found a security problem?
Please tell us privately at [email protected]. We'll reply quickly and keep you updated while we fix it. Our security.txt has the details.
Who else handles data
We use a small number of carefully chosen providers. Full details are on our data processing page.
| Who | What for | What data | Where |
|---|---|---|---|
| Linode. Akamai Technologies, Inc. | Runs the application, database and file storage | All data, including patient records | United Kingdom |
| Mailgun Technologies, Inc. | Sends appointment and recall emails | Patient name, email address and the email's content | European Union (Mailgun's EU region) |
| Twilio Ireland Limited | Sends text messages, when a practice switches them on | Patient mobile number and the text (never the appointment type) | Ireland (Twilio's EU region) |
| Cloudflare, Inc. | Secure connections (HTTPS) for practices' own booking addresses, and spam protection | Booking pages as they pass through, encrypted | Global network |
| Stripe Payments Europe, Limited | Billing practices for their plan and credits | Practice billing details only: no patient data | European Union, with some processing in the United States |