Patient records, kept the way they should be.
HealthEase holds the records clinics and hospitals cannot afford to lose or leak. Here is how they are protected, in plain language.
What is in place today.
-
Encrypted end to end
Patient records are encrypted while they travel and while they are stored.
-
Clinics never see each other's data
Every clinic's records are kept separate from every other clinic's and protected on their own. No screen, report or search crosses that line.
-
People see what their job needs
Access is set by role, receptionist, doctor, pharmacist, accountant and more, and can be adjusted person by person. Important actions are recorded.
-
Backed up continuously
Records are backed up all the time, so a mistake or a damaged device does not mean lost data.
-
Keeps working offline
If the connection drops, the front desk keeps registering patients and printing tokens. Everything syncs when the connection returns.
Questions security teams ask.
How does HealthEase protect patient data?
Records are encrypted in transit and at rest, each clinic is kept separate from every other, access is limited by role, important actions are recorded, and backups run continuously.
Can one clinic see another clinic’s data?
No. Every record belongs to exactly one clinic, and each clinic’s data is kept and protected separately.
What happens if data is deleted or damaged?
Backups run continuously, so records can be restored.
Does HealthEase work without the internet?
Yes. Registration, tokens and printing keep working offline, and the records sync when the connection is back.
Can we see more detail for a security review?
Yes. We share security details with hospitals and procurement teams directly, under the right agreements, rather than publishing them.
The legal side is in our data processing agreement and product privacy policy. Need more detail for a procurement review? Talk to us.
Report a vulnerability.
Found a security problem? Email hello@healthease.app with what you found and the steps to reproduce it. We acknowledge every report within a few working days.
We will not take legal action against good-faith research that does not touch any clinic's patient records and does not disrupt the service clinics depend on.
Out of scope: viewing, copying or changing any clinic's patient records; anything that slows or interrupts the service for real clinics; social engineering of our staff or customers; and automated scanning of the live product without asking us first. Please test against your own trial account instead.