Data Handling
A plain-English summary of how patient data is stored and protected.
Last updated 29 June 2026 · version 2026-06-29.draft-1
This page is a plain-English companion to the Privacy Policy, for clinic staff who want a quick picture of how patient data is handled. [DRAFT]
Australian residency
Patient and clinic data is held in Australia. [DRAFT: DigitalOcean Sydney; confirm.]
Encryption
Data is encrypted in transit. Stored provider credentials are encrypted at rest. [DRAFT: confirm at-rest encryption posture for the database and list specifics.]
Tenant isolation
Every data query is scoped to the requesting practice, so one clinic can never read another clinic's patients.
Access logging
Lookups against patient data are recorded in an audit trail (who, when, which patient).
Provider portals
MedHound signs in to the clinic's radiology-provider portals using the credentials the clinic supplies. [DRAFT: describe the automation approach and the agreed position on provider terms, phi-hardening §6.]