How we protect your data
Healthcare-grade by default.
UK data residency
All data encrypted in transit and at rest, hosted in UK data centres.
Passwordless sign-in
Every sign-in needs a one-time code to a verified email or mobile, so access depends on a verified channel, not a stored password. Passkeys and authenticator-app MFA are supported, and you can require them for your staff.
Per-practice isolation
Every organisation's data is logically separated, with strict tenant-scoped access controls; Enterprise can request dedicated infrastructure.
GDPR & DPA
Compliant by design, with a documented sub-processor chain.
Safe migration
Assessment first: we analyse your data and agree a written plan, with a parallel-run before go-live.
Full export, on request
Your data is yours: we provide a full export whenever you ask, on every plan.
Compliant by design
GDPR & UK DPA
Certified