Security and privacy
Where patient data goes
Patient data is the most sensitive thing a practice holds. This is every place it travels, and what happens to it there.
Your practice
Computer, iPad or phone
- Each person signs in with their own account
- Works in the browser, nothing to install
healcraft
Where the records live
- Stored and processed inside the European Union
- Encrypted in transit and at rest
- Each practice kept apart from every other
- Changes to clinical data logged for the owner to review
Google Vertex AI
Reads lab results and drug records
- Used only to read the values
- Never used to train models
- Lab and drug record files deleted once you confirm or discard the values, or after 7 days
Stays on this computer
Imaging studies
- Opened in the browser. Only the snapshots you keep go into the report
Google Calendar
Only if you connect it
- Read only, and healcraft never changes it
- A lab PDF goes to healcraft and is read by Vertex AI in the EU. Once you confirm the values, the file is deleted.
- A CT study is opened on this computer and never uploaded. Only the snapshots you keep go into the report.
- Google Calendar, if you connect it, is read and never changed.
How long things are kept
A lab or drug record file
Read by AI, then deleted once you confirm or discard its values, or after 7 days if nobody does.
A patient you delete
Gone from your patient list and search at once. Their chart and its files are deleted for good after 30 days.
A practice you close
Read-only at once, and the owner can reactivate it for 30 days. Then every patient’s chart and files are deleted. The invoices we issued you are kept, because the law says we must.
Before you trust it
No other practice sees your patients
Every practice is kept apart from every other, and each person signs in with their own account.
The owner decides who is on the team
Only the owner invites or removes people, manages billing and can close the practice. Someone removed loses access at once.
AI reads two kinds of file
Google Vertex AI, in the EU, reads the lab results and drug records you upload, for their values and nothing else. Visit notes, reports and imaging studies are never sent to it.
Every record export is logged
Export record saves a patient’s record to your device and sends it nowhere. It waits until you confirm the patient has consented, and lists each export under Record disclosures, in their Consent tab.
Analytics wait for your consent
Usage analytics run only if you accept them, and they never record your screen.
Your rights, in writing
Write to privacy@healcraft.app, or to the Hellenic Data Protection Authority.
Questions
What doctors ask before moving their practice to healcraft.
Built for the consulting room. Available today.
Start your 14-day free trial. No credit card required.
