1. Data stored in India
All app data, including patient records, is stored on servers in Mumbai, India.
2. Encryption
All traffic between your browser and ClinicManagerPro is encrypted with HTTPS. Data is encrypted at rest by our database provider.
3. Access control
- Team members join only by invitation from the clinic owner or an admin.
- Six roles limit what each person can open. For example, pharmacists don't see consultation notes.
- Staff see only the branches they're assigned to.
- Every clinic's data is kept separate at the database level, so one clinic can't see another's.
4. Reliable records
- Signed consultation notes are locked against changes.
- Each branch's invoice numbers run in an unbroken series, and the prefix locks once invoices are issued.
5. Payments
Subscription and patient payments are processed by Razorpay. We never see or store full card numbers.
6. Our people
Access to production systems is limited to the people who need it to run and support the service.
7. Report a security issue
If you believe you've found a vulnerability, email contact@clinicmanagerpro.com with the details. Please don't access other people's data or disrupt the service while testing. We'll acknowledge your report and keep you updated while we fix it.