Security
Where your patients' data lives, how it is protected and who can see it.
Hosted on Amazon Web Services, in Canada
KlicSante runs on Amazon Web Services (AWS) infrastructure, a recognized host used worldwide by hospitals and banks. Your data is stored in the AWS Canada region, in Montreal; its encrypted backups are kept in a second Canadian region, in Calgary. It stays under Canadian jurisdiction: it is not hosted in the United States.
Encrypted everywhere
Data is encrypted in transit (HTTPS) and at rest: database, documents and backups, with keys managed by AWS, one per data type, rotated every year. Official numbers (NIF, CIN…) are encrypted a second time, with a key unique to your organization. On a computer or phone working offline, the local copy is encrypted and erased at sign-out.
Your organization is isolated
Each organization’s data is kept apart: the database itself refuses access from another organization’s account, even if the application makes a mistake. The KlicSante team has no access to your patients’ records: its console only sees your organization’s name, subscription and accounts.
Controlled staff access
Two-factor authentication is mandatory for all staff, with an authenticator app or a passkey, never by SMS. Each role sees only what it needs, clinic by clinic. You manage accounts yourself and can cut off a lost device.
Every access is logged
Opening a record, changing it, dispensing a medicine: everything is written to a log that can be neither changed nor erased, each line sealed to the one before.
Backups and continuity
Database replicated across two data centers; point-in-time restore to the minute over the last 35 days; daily backups kept 90 days and monthly backups kept a year, locked against deletion. When the Internet goes down, your teams keep working and everything syncs when the network returns.
Checked documents
Every uploaded document goes through an antivirus before being filed in the record, encrypted; it only opens through a link valid for one minute.