Owners
Limits who can see financials and who can export, which is where most real exposure sits.
Security
Patient data security and access control
A clinic holds medical histories, national IDs and payment records. The question is not whether that data is sensitive but who inside the clinic can see it, and whether you could prove who did.
SessionsUser actionsPermissions
Active sessions7
Two-factorOn
Actions today1,284
Failed logins2
User actions
NewDr. Fatimah Al-KafiInvoice #292 created2 min
EditReception · MahaAppointment moved to Room 214 min
DeleteDr. Fayez KhanfarOperation removed · #181 h
EditDr. Fatimah Al-KafiPrice changed · $4,000 → 4,6001 h
NewReception · MahaPatient created · #P-002193 h
Permissions are the security most clinics are missing
Breaches at clinics are rarely dramatic. They are a receptionist who can see every financial report, or a departing staff member who exported the patient list on their last day. Both are permission problems.
- Roles defined per clinic, not a fixed set
- Separate rights to view, create, edit, delete and export
- Branch scoping, so a manager sees their location only
- Financial visibility separated from clinical visibility
- Export as its own permission, because it is the one that leaves the building
An audit trail that answers "who"
The value of a log is entirely in whether you can search it when something has gone wrong. Who opened this record, who changed this price, who deleted this appointment, and when.
- Every view, change and deletion recorded against a user
- Before and after values on edits, not just the fact of a change
- Searchable by user, patient, date and action
- Kept independently of the record it describes, so deleting one does not remove the other
The things you should be able to ask a vendor
Most security questions have specific answers and a vendor who cannot give them is telling you something. These are the ones worth asking anybody, including us.
- Where is the data hosted, and under whose jurisdiction
- Is it encrypted in transit and at rest
- How often are backups taken, and have restores been tested
- Who at the vendor can access clinic data, and is that logged
- How do you get your data out if you leave
Who this protects
Access control protects patients first and the clinic second, and it is the owner who carries the risk.
Clinic managers
Grants and removes access as staff join and leave, without calling support.
Patients
Their record is seen by the people treating them rather than by everyone with a login.
By hand, and with Dentolize
A shared login is the most common security arrangement in a small clinic, and the worst.
Doing it by hand
- One shared login for the desk
- Everyone sees everything
- Export available to anyone
- No way to know who changed a price
- Access removed by changing the password
With Dentolize
- A named account per person
- Roles scoped to branch and to function
- Export as a separate, granted permission
- Audit trail with before and after values
- Access revoked per user, instantly
Questions
Security — frequently asked
Who can see patient records in Dentolize?
Only the roles you grant. Clinical and financial visibility are separate permissions, and access can be scoped to a single branch.
Is there an audit trail?
Yes, on views, changes and deletions, with before and after values, searchable by user, patient, date and action.
Where is clinic data hosted?
On managed cloud infrastructure with encryption in transit and at rest, and automatic backups. Hosting region is confirmed during onboarding.
What happens when a staff member leaves?
Their account is disabled immediately and their history in the audit trail remains, which is the point of named accounts rather than shared ones.
Can we restrict exporting the patient list?
Yes. Export is its own permission precisely because it is the action that takes data out of the clinic.
See Security on your own clinic
Thirty minutes on how your clinic actually runs, not a generic slideshow. We will call you within 24 hours.