Data encryption: ensure compliance with EU and US regulations and medical standards (e.g. GDPR, HIPAA, DVG, NHS Security Toolkit, HDS, etc). It takes one API call to store your data with secure record level encryption.

Pseudonymisation and de-identification: encrypt parts of your health records or personal identifiers.
De-identification relieves you from privacy implications. Our data architect can give you an assessment and help design your setup.

Identity Management: implement user signup, session management, audit logs, monitoring and data access authorisation.

Granular access control: define flexible access control policies for users or groups on single documents or collections. No programming is needed.

Secure and compliant data sharing: securely share data among applications and users, while ensuring compliance with EU and US laws.

Ensure accountability: Audit Log module meets all the requirements of GDPR and HIPAA. They are also sanitised to ensure they don’t leak sensitive data.

Query, monitor or export logs: You can search for specific logs, trace back events by type, create alerts, view all events over a time window or generate an audit-ready export.

Comply with medical standards: audit logs meet the requirements of GDPR Art. 25 & 32, HIPAA 164.312(b) and FDA 21 CFR ch.11, DICOM, etc.

Data encryption: ensure legal validity of consents. Keep details of every user consent you collect in your product to know exactly what each user accepted at any moment.

Keep consents synchronised: query or update user preferences instantly. Updates keep legally valid history for auditing purposes and demonstrate data subject right implementation (e.g. Right to be Forgotten).