Security & data protection
Last updated: 18 July 2026
Health data comes first
Health data is a special category of personal data under Article 9 of the GDPR, and Medisora's architecture reflects that from the ground up. On this page we transparently describe how your practice's data is protected — no marketing shortcuts, only verifiable facts.
Data isolation for every practice
Every practice has its own isolated database schema. Data from different healthcare providers is never mixed in shared tables — isolation is enforced at the database level, not merely by application logic.
Encryption
Data in transit is protected by TLS 1.3, data at rest by AES-256. The most sensitive fields — national identification numbers and medical histories — are additionally encrypted at the application level (AES-256-GCM), so they remain unreadable even with direct access to the database; lookups by national identification number use a secure HMAC index instead of the plain value.
Access control
Doctor / nurse / reception / administrator roles with granular permissions: clinical actions (signing a record, prescribing) are reserved for doctors, settings and exports for administrators. Two-factor authentication (TOTP) with backup codes and a sign-in history are part of every account.
Audit trail
Every view of a patient's record is logged (who, when, from where), and signed records are immutable — corrections create a new timestamped revision while the original wording is preserved. The audit log cannot be modified even by the practice administrator.
Data exclusively in the EU
The application and databases run in a data center in Frankfurt am Main (DigitalOcean, EU) with daily backups and point-in-time recovery. The marketing website and DNS are served by Cloudflare (EU-U.S. Data Privacy Framework + standard contractual clauses); health data never passes through the website.
GDPR and contractual framework
A data processing agreement under Article 28 of the GDPR is part of the service, we publish the list of sub-processors in our privacy policy and give 30 days' notice of any changes. A complete data export (ZIP, JSON + CSV + attachments) is free of charge at any time — your data is never held hostage.
Reporting a vulnerability
If you have discovered a security vulnerability, write to us at info@medisora.sk or use the contact form. We treat reports as a priority, and we never take legal action against researchers who act responsibly. Machine-readable contact: /.well-known/security.txt.
What we're working on
A geographically separate backup location, qualified electronic signatures under eIDAS, and a data protection impact assessment (DPIA) for the upcoming AI module. We keep the security roadmap continuously updated.