DMediQLegal
Security & data protection
How DMediQ protects hospital and patient data.
Access control
- Role-based permissions per module (view, add, edit, delete, approve) and branch scoping.
- Optional two-factor login, login rate limiting and forced password change on first login.
Encryption
- HTTPS/TLS for all traffic.
- AES-256-GCM encryption for sensitive fields at rest.
- Expiring, tokenised links for reports and bills sent to patients.
Accountability
- Audit trail of changes to sensitive records and a patient-record access log.
- Consent records, data-subject request handling and a breach register.
Compliance support
DMediQ provides technical controls that help hospitals meet the GDPR, India's DPDP Act 2023, HIPAA-style safeguards and similar laws. Compliance itself depends on each hospital's policies and processes.
Report a vulnerability
Email support@dmediq.com with details. We acknowledge reports within two working days.
Last updated 2026-10-21. Template — have your legal advisor review before publishing. Questions: sales@dmediq.com.