Security & Compliance
Choose between client-controlled Zero-Knowledge protection and Google Cloud KMS-backed managed encryption.
Zero-Knowledge Encryption
Sensitive clinical content is mathematically encrypted on the user’s device before upload. The MedEase backend stores protected data without holding the decryption key, secured by personal PIN vaults and recovery phrases.
Server-Managed KMS Encryption
Protected clinical values can also be encrypted through the MedEase backend using organization-specific keys protected by Google Cloud KMS with AES-256-GCM encryption for automated workflow compatibility.
Google Cloud Infrastructure
MedEase application services run on Google Compute Engine virtual machines, while managed organization keys are protected separately through Google Cloud KMS.
6-Tier Role-Based Access Control
Granular permissions restrict data access by organization, branch location, and staff role across clinical, billing, pharmacy, lab, and administrative operations.
Private Document & Audio Vault
Patient investigation reports, dental scans, consultation audio recordings, and medical attachments are stored in cryptographically isolated storage vaults with controlled access rules.
Cryptographic Audit Trails
Comprehensive, tamper-resistant system audit logs record access history, data modifications, prescription routing, and communication delivery events.
Partner Connection Governance
Connect with partner pharmacies using private organization codes with explicit connection-specific permissions, branch selection controls, and order auditing.