Security

Enterprise-grade protection for healthcare data

Healthcare data is a serious responsibility. DocuHealth applies the same security disciplines as leading banks and hospitals — for every tenant, large or small.

  • AES-256 Encryption
  • POPIA & GDPR Aligned
  • Multi-Factor Auth
  • HIPAA-Style Controls
  • Complete Audit Trails
  • 99.9% Uptime SLA
Security Controls

Defence in depth, by design

Security isn't a feature — it's the foundation of the platform.

Encryption at rest

All data encrypted with AES-256. Encrypted backups with strict retention and recovery controls.

Encryption in transit

TLS 1.3 for all traffic between clients and our infrastructure. Zero plain-text data paths.

Identity & access

Role-based access control with granular permissions, MFA, SSO and session controls.

Audit trails

Every action is timestamped and attributed — from record views to billing changes.

Tenant isolation

Logical and cryptographic isolation between tenants, with per-tenant encryption keys.

Penetration testing

Independent, recurring penetration tests and continuous vulnerability monitoring.

Availability

Redundant infrastructure, regular tested backups and a 99.9% uptime SLA.

Data residency

Regional data residency options so your data stays where your patients are.

Questions about our security?

Our security team is happy to share our practices, SOC evidence and data processing details.

14-day free trial · No credit card required · Cancel anytime