Trust center
Medical records treated as what they are.
We handle health information. That is why security in Klinicbase is not an add-on: it is built into how data is stored, read and delivered.
Every clinic isolated
Each clinic’s data lives in its own space. No query crosses clinics, and the organization comes from the session, never from what the browser sends.
Least-privilege access
Reading any data requires the right role, permission, location and assignment. Doctors see their patients; the front desk never sees clinical notes.
Everything is logged
Every read of a medical record is audited (who, what, when, from where), including denied attempts. If the audit entry cannot be written, the data is not returned.
Protected accounts
Two-factor sign-in, inactivity timeouts and instant revocation: deactivating a user cuts their access on the next action.
Tamper-evident documents
PDFs are generated on the server with their SHA-256 fingerprint and downloaded through signed links that last 5 minutes at most.
Public verification
Anyone can confirm a document is authentic by scanning its QR code, without seeing clinical data.
Google Cloud infrastructure
Encryption in transit and at rest, backups and point-in-time recovery.
Abuse protection
Bot verification, rate limits per user and per IP, and strict validation of everything that reaches the server.
Reference framework
Law 81 of 2019 (Panama)
Personal data protection: consent, purpose, and the rights of access, rectification, deletion, objection and portability.
Law 68 of 2003 (Panama)
Patients’ rights to information and to free and informed decisions.
HIPAA technical safeguards
Klinicbase’s access, audit, integrity, authentication and transmission controls follow the HIPAA technical safeguards (45 CFR §164.312).
HIPAA is a United States law and has no official certification. Klinicbase describes its controls; it does not present itself as “HIPAA certified”.
Vulnerability reporting
If you find a security issue, write to seguridad@klinicbase.com. We respond to good-faith reports and take no action against responsible research.
Shall we look at it with your clinic?
We will show you Klinicbase in 30 minutes, using the real flow of your front desk, your consultations and your billing.