Your medical records require the highest level of privacy and technical protection. Here is how we keep your health data secure.
Uploaded medical documents are stored in private Cloudflare R2 buckets. Files are never publicly indexed or accessible to web crawlers. Short-lived signed URLs (15-minute expiration) are generated on-demand only for authorized views.
Firebase Authentication with Google Sign-In and email/password. Every API route verifies authentication tokens on the server before processing requests.
Strict role separation between Patients, Doctors, and Clinics. Patients retain complete sovereignty over their data. Doctors can only view records explicitly authorized by a patient.
All sensitive operations â document uploads, AI processing, share link creation, public doctor views, and revocations â are logged with timestamps and user identifiers.
Share links use cryptographically random 256-bit tokens with optional passcode protection. Links are time-limited (24 hours, 7 days, or custom) and can be revoked immediately by the patient.
All AI summarization is handled server-side. Third-party API keys are never exposed in browser client code. Documents are processed once and cached to prevent unnecessary data transfers.
API endpoints implement server-side rate limits and SHA-256 duplicate detection to prevent spam, unauthorized automated access, and accidental duplicate billing.
When you delete a medical record, the file is permanently purged from Cloudflare R2 along with all associated summaries and timeline entries.