Data Security

Data Security in TheClinicApp
Your data

Although we host your data, you remain the data owner at all times. We have implemented stringent technical and organisational measures to ensure your information is processed securely and confidentially. 

Data Storage and Security

TheClinicApp meets the data security requirements outlined within GDPR.

Your data is hosted on Google Cloud Platform in a Google SQL database. You can read more about GoogleCloudPlatform here: https://cloud.google.com/

The data is stored on Google Storage and is automatically backed up and retained for 7 days as a measure facilitating disaster recovery. The data is encrypted at rest and we also implement meticulous security methods outside of the server, like implementing 256-bit SSL encryption to all incoming and outgoing connections, meaning your data is always safe from prying eyes when you use our software, thanks to a high-level encryption method used whenever data is saved. For more information about the encryption at rest please see: https://cloud.google.com/docs/security/encryption/default-encryption

Google Cloud’s common infrastructure and services, including Google Cloud Platform and Google Workspace, are certified as compliant with the ISO/IEC 27001 standard for information security.

Data Access

Your data can be accessed by the staff members you have added to your account once they have verified their email address. You control the level of access for each staff member.

Closing your account

In the event that you terminate our services, your data will be retained for a period of 30 days from the date of cancellation, after which it will be securely deleted. Should you wish to transfer your information to another provider, you may do so within this period using our data export facility.