Platform Security & Privacy

Health data transmitted securely over TLS, salted password hashing, isolated document storage, and strict role-based access control.

TLS Encryption in Transit

All communication between your device and our servers is transmitted over encrypted TLS connections to protect against interception on public networks.

Salted Password Hashing

Account passwords are cryptographically hashed using PBKDF2/bcrypt with individual salts before database storage. Plaintext passwords are never stored or logged.

Role-Based Access Control (RBAC)

Backend API endpoints verify authentication tokens and user roles on every request. Patients can only access their own sessions, and staff access is limited to authorized coordinators and administrators.

Isolated Document Storage

Patient medical records and diagnostic files are stored outside public web folders. Files are served strictly through authenticated endpoints that verify case ownership or coordinator authorization.