All patient records, clinical notes, and images are encrypted on disk with industry-standard, audited encryption. Encryption is mandatory and cannot be disabled.

Passwords are hashed with an industry-standard, OWASP-recommended work factor. Minimum 12-character requirement, automatic session lock, and account lockout after repeated failed attempts.

Every access to patient data is logged with a timestamp, user identity, and device. Any tampering with a log entry is cryptographically detectable.

Six distinct roles with granular permissions: Admin, Provider, Assistant, Front Desk, Billing, and Read-Only.

LAN sync and the patient portal use HTTPS with certificate pinning. Patient data never travels unencrypted across the network.

All patient data is stored locally on your hardware. No cloud server, no third-party data processor, no recurring cloud database.