Security at Insimen Medical Record

1. Security principles

Insimen Medical Record is designed around least-privilege access, protection by design, and limiting impact when an issue occurs. No digital system is risk-free, so controls are reviewed and improved as the product evolves.

2. Product controls

Controls are applied in proportion to the feature and its risk.

• server-side authorization that derives access from an authorized facility and role
• segregation of patient, healthcare-professional, facility, and internal-area access
• audit trails designed to trace activity without turning clinical-record contents into general logs
• special controls for sensitive documents, prescriptions, pharmacy data, and administrative actions

3. Your role

Keep your account and devices secure.

• Use a unique password and never share it.
• Enable available account verification methods.
• Do not send passwords, one-time codes, tokens, or other secrets through regular messages.
• facilities determine the processing basis, staff authority, retention, and clinical-data quality required by applicable obligations
• healthcare professionals use their access only for lawful care needs
• patients keep account credentials secure and provide accurate information during appointment or screening processes

4. Sensitive access and changes

Sensitive changes are checked server-side. Relevant activity may be recorded to support security, abuse prevention, and incident investigation.

5. Incident reporting

If you suspect unauthorized access, change your password, sign out of unrecognized sessions, and contact us. Do not include passwords, one-time codes, or unnecessary private content in a report.

6. Important limit

Medical Record is an operational and documentation support system. It does not replace clinical assessment, healthcare-professional judgment, professional standards, or a healthcare facility's legal obligations.