Security & Compliance
Mandatory MFA, impossible-travel blocking, database-enforced tenant isolation and a tamper-evident audit trail, on by default for every practice.
- MFA mandatory for staff and referrers
- Impossible-travel sign-ins refused
- SHA-256 hash-chained audit trail
Mandatory multi-factor authentication
Staff and referring doctors must enrol an authenticator app before their first session; there is no skip and no opt-out. Recovery is by backup codes or an administrator, never by email or SMS. Patients can add two-step sign-in to their portal account.
Impossible-travel blocking
A correct password from a place the account could not have reached since its last session is refused, logged as a high-severity event, and the owner is told. Thresholds are security policies a practice can tighten.
Tenant isolation in the database
Row-level security is on for every tenant table, so one practice's query cannot return another's rows even if application code were wrong. The release process fails any query that omits the tenant.
Tamper-evident audit trail
Every change, sign-in and patient-record view is logged with who, when and from where, then sealed into a SHA-256 hash chain. A verification job re-checks the chain and reports into the practice's compliance report.
Privacy by design
Break-glass access with a reason, an expiry and oversight; a privacy incident module that tracks the regulator's clock; retention set per region; personal data export on request. Controls are mapped to HIPAA, PHIPA and the Australian Privacy Principles.
Encrypted in transit, encrypted secrets
TLS 1.2 or higher with HSTS to every browser and portal, TLS to the database, and AES-256-GCM field encryption for credentials, authenticator secrets and integration keys. Images stay in your PACS; Clarirad links to them.
Roles and permissions
Access by role with a reviewable permission matrix and audited per-user overrides. Front-desk roles cannot search across practices; clinical and finance screens are gated separately.
Sessions and network allow-lists
Configurable session lifetimes, a cap on open sessions per user, remote sign-out and new-device alerts. A practice can limit staff access to its own office and VPN addresses, checked on every request.
Lockouts and abuse controls
Escalating account lockouts, blocking of addresses that spray many accounts, a bot challenge on repeated attempts, and an alert when a correct password lands in the middle of a guessing attack. Administrators watch it all on a security dashboard.
Isolated regional deployments
Australia and Chile run as separate deployments with their own databases, keys and configuration. Nothing is shared between regions, and a practice's data never leaves its region's deployment.
Who uses it
The roles that work with this every day.
See Security & Compliance on a live walkthrough
Book a walkthrough and see how Clarirad fits your practice's workflow, from booking to billing.