Security
Measurable safeguards for clinical data — no fabricated certifications.
- Access controlCookie-based sessions, with separate permission sets for owner, admin, therapist, front-desk, and supervisor. Who supervises whom is not stored.
- Separate consent for AITranscribing session audio into a note draft is gated on its own consent record. Live in-session assist is therapist-facing only.
- KVKK-minded legal packNotices, DPA, and controller texts are published on this site (drafts pending counsel review).
- Export and erasureExport and deletion requests are in the product. Backup details are fixed in the agreement.
- Encrypted in transit and at restTLS between the browser and the API; sensitive fields are stored under AES-256-GCM envelope encryption with per-clinic keys. The server can decrypt — this is not end-to-end.
- KVKK-minded data processingNotices, consent language, and a data processing agreement ready in Turkish and English.
- What changed, and whenCreate, update, and delete are logged. A locked note is only corrected with an addendum. Views are not logged.
- Your data stays yoursSelf-service export and account/client data deletion requests.
- AI never finalizes on its ownA draft you don’t accept never reaches the file. Prompts instruct the model not to write a diagnosis or a treatment plan.
Let’s schedule a short call
No free trial. We’ll walk through what you need; 30-day money-back applies.
No free trial · 30-day money-back after purchase