Security and privacy
Built so that the easy thing and the safe thing are the same thing
Vitels stores the most sensitive data a small clinic holds. The protections below are enforced in the database and tested on every deploy, not written in a policy document and hoped for.
Enforced, then tested
- 1Row-level securityEnforced by the database, not the app
- 2Append-only audit logWritten by the database itself
- 3Reason-gated break-glassTime-limited, visible to your admin
- 4Private database, IndiaNo public endpoint, 30-day backups
Protections
Eight things that are true in the database, not just in a policy
Isolation in the database
Every clinic's rows are separated by row-level security that the application cannot switch off. Cross-clinic reads are structurally impossible, and an automated test proves it on every deploy.
No standing access
No Medyzen staff member outside named engineering can open patient records. The support role is granted nothing on patient tables.
Break-glass, logged
If support must open a record, it is reason-gated, time-limited and written to an access log your clinic admin can read at any time without asking.
Append-only audit
Every change is written to an audit log by the database itself. Saved bill amounts cannot be edited by anyone, including engineers with database access.
No passwords
Mobile number and OTP, so each person has their own identity on shared clinic computers. Throttled per phone and per network. Sign out of all devices in one click.
No clinical decision support
No interaction warnings, dosage checks or diagnosis suggestions. The software records the doctor's decision and never influences it.
Hosted in India
Data lives in a private database in Central India with no public endpoint, daily backups kept 30 days and point-in-time restore. Uploaded files are private and streamed only after a clinic-scoped check.
Your data, your export
A clinic admin can export everything as CSV at any time. Medyzen is the processor; your clinic is the data fiduciary under India's Digital Personal Data Protection Act.
Honest limits
What is not done yet
We would rather you read this here than find it later.
- The offline cache on a clinic device is not encrypted at rest. Signing out with nothing unsent wipes it.
- Erasure of a patient record on request is recorded but not yet executed, pending counsel's view on retention periods.
- ABHA linking and consent-based record sharing are on the roadmap and not switched on.
Found something? Write to tech@medyzen.in.
Set up your clinic in about ten minutes.
Sign in with your mobile number, enter the clinic details, and our team verifies your medical council registration before patient registration switches on. Usually one working day.
No card · No licence fee · Export any time
