Tenant isolation (RLS)
Every hospital's data lives behind PostgreSQL row-level security — one tenant can never read another's records, enforced at the database, not just the app.
Safety & security
Enterprise-grade security, by default
Patient data is protected at every layer — database, application and network.
Role-based access control
Granular, editable roles and permissions govern who can see and do what, per module and per action.
Full audit trail
Every sensitive action — logins, edits, exports, restores — is logged with who, what and when for compliance and forensics.
ABDM consent & ABHA
Consent-based record sharing, ABHA linking and care-context linking built to India's digital-health standards.
Login protection
Cloudflare Turnstile captcha, per-IP brute-force rate limiting and short-lived JWT sessions with silent refresh.
Auto Backup
Full backups of your setup and data run automatically on a schedule, with off-site copies and retention. Recovery is carried out by MediCore on request — your data is never a single point of failure.
Controls & compliance
lock
TLS EncryptionEncrypted in transit
dataset
Tenant IsolationPostgreSQL row-level security
admin_panel_settings
Role-Based AccessGranular, per module
phonelink_lock
Multi-Factor AuthAvailable
password
Bcrypt CredentialsSalted & hashed
history
Full Audit TrailEvery sensitive action
backup
Auto BackupScheduled + off-site copies
gavel
DPDP-AlignedIndia's data-protection law
verified_user
HIPAA-Style SafeguardsDesigned to support
Every control above is implemented and verified in production. MediCore is built to support India's DPDP Act and HIPAA-style safeguards; formal application-level certifications (e.g. ISO 27001, SOC 2) are on our roadmap.
Infrastructure — hosted on OVHcloud
workspace_premium
ISO/IEC 27001Information security
workspace_premium
ISO/IEC 27701Privacy management
workspace_premium
SOC 2AICPA trust services
workspace_premium
GDPREU data protection
These certifications are held by our infrastructure provider, OVHcloud, for the data centres MediCore runs on — they cover the hosting layer, not MediCore's application. View OVHcloud compliance ›
See MediCore on your own data
We'll set up a sandbox hospital for your team and walk you through it — no commitment.