Skip to content
iyadatna — the clinic management system for Egypt and Saudi Arabia. Try it free for 14 days.
iyadatna
ع Start free
Security

How we protect your patients’ data

A plain explanation — no jargon — of what we actually do to protect the medical record.

A patient record is not ordinary data. A leak cannot be undone, and no apology makes up for it. So this page sets out in detail what we do — and says plainly what we do not claim.

Complete isolation between clinics

Each clinic sees only its own data. Isolation is not a condition a developer writes into every query and might forget once; it is enforced at the system level and applied automatically to every read and write.

  • Every table holding clinic data is bound to its clinic, without exception
  • Filtering is automatic on every query — it does not rely on a developer remembering
  • An automated test walks every table and fails the build if one falls out of line
  • Every request inside the clinic panel verifies the clinic before it runs

Sensitive fields encrypted

Not every field is encrypted — encrypting everything breaks search and with it the daily work. Fields that are never searched by fragment are encrypted inside the database, and reading the database directly does not reveal them.

  • National ID encrypted, with a fingerprint for exact matching that stops duplicate files
  • Confidential notes in the patient file and in the encounter are encrypted
  • Payment gateway data is encrypted and never stored as clear text
  • Phone numbers are deliberately not encrypted — reception searches them by fragment dozens of times a day

Mandatory two-factor authentication

Everyone who reaches a medical record passes a second step after their password. It is not an option for whoever remembers to switch it on — it is a condition of entry. A password alone does not open a patient file.

  • An authenticator app on the phone (TOTP) — no SMS codes that can be intercepted
  • Single-use recovery codes for emergencies
  • An account that has not set up 2FA cannot reach the medical record at all
  • Rate limits on sign-in and search to stop automated guessing

An audit trail, and no hard delete

Medical records are not deleted. Every change to an encounter, prescription or diagnosis is recorded with its old and new value, who made it and when — so "who changed the dose?" always has an answer.

  • Every change stored with both the old and the new value
  • The name of whoever made it, timed to the second
  • Deleting hides a record rather than erasing it — it stays recoverable and reviewable
  • A defined retention policy runs automatically instead of the log growing without limit

Fine-grained permissions per role

Reception books an appointment and does not open an encounter. Accounting sees invoices and does not see diagnoses. Roles are built around what each person needs to do their job, and nothing beyond it.

  • Six ready roles: owner, manager, doctor, nurse, reception, accountant
  • Permission is checked on the action itself, not just by hiding a button
  • Confidential notes are withheld from anyone without the permission to read them
  • Attachments and X-rays sit behind a temporary link that stops working once it expires

Files and backups

Attachments and X-rays are not stored in a public folder whose URL can be guessed. Every file sits behind an identity and clinic check, and its link expires after a short window.

  • Private storage — no direct link exists to any patient file
  • Every download verifies the user and the clinic before handing the file over
  • Signed links expire and cannot be shared indefinitely
  • A nightly backup, and a monitor that shouts if it stops — silence is not proof it worked

What we do not claim

The product is new, and we would rather you heard its limits from us than found them yourself. These are things we do not say about ourselves today:

  • We hold no formal security certification (ISO 27001, SOC 2 or similar). The system is built to known practices, but it has not been through an accredited external audit.
  • We claim no e-invoicing compliance in Egypt or Saudi Arabia. Tax numbering is sequential and gap-free, but there is no official integration with the government systems today.
  • The system does not diagnose and does not set a dose. It warns about a recorded allergy; the clinical decision belongs to the doctor alone.
  • The legal pages are a draft that has not yet been through a lawyer, and that is stated on the pages themselves.

Found a vulnerability?

If you find a security problem, tell us before you publish it. We prioritise security reports, and we will not pursue anyone reporting in good faith.

Coming soon

Ready to run your clinic like a pro?

Start your free trial today — no card, in minutes.

Start free now Or talk to us on WhatsApp

No credit card · Cancel anytime · Ready in minutes