Your data is yours.

This is the whole security sheet. It is also an appendix to every proposal I send.

Where your records live

In Google Cloud's Johannesburg region (africa-south1). That covers the database, the application that reads it, the backups and the reporting copy.

What is not in South Africa

Two services are global, and I would rather say so than claim otherwise. Sign-in (authentication) holds your staff's email addresses and hashed passwords outside South Africa. The content delivery network serves the application's screens to your browser from Google's global network. Your records are stored on neither.

One project per client

Each client gets a separate Google Cloud project: its own database, its own access controls, its own billing line. Nothing is shared with another business. If you leave, the project can be handed over to you whole.

Backups

Daily, kept for 30 days. Separately, a full export goes every week to a storage bucket in your own project.

Who can see what

Access is by role: practitioner, receptionist, bookkeeper. Each role sees only what it needs. Every read and write of a patient record goes into an audit log.

Encryption

Data is encrypted at rest and in transit by Google Cloud.

POPIA

Before any of your data is loaded, we sign a POPIA operator agreement. You remain the responsible party; I act as your operator.

When something goes wrong

You hear from me within 24 hours, in writing: what happened, what it affected and what I changed.

Leaving, or asking for a copy

A full export of your data within 48 hours of asking, in open formats. Deleted on request.

Questions about your data? {{PHONE}}