Patient records stay private
Health records need more care than an ordinary app gives them. In DoctorKhata the most important rules are enforced by the database itself, not left to settings or to good intentions. Here is exactly how.
मरीज़ों का डेटा, सुरक्षित।
Each clinic is walled off in the database
- Every table that holds clinic data has row-level security switched on and enforced in PostgreSQL. The database itself checks which clinic a request belongs to and only returns that clinic's rows.
- The app connects with a database account that cannot switch this off, cannot skip it, and cannot delete records.
- Every part of the app is tested to prove that one clinic cannot read or change another clinic's data.
Each person sees only what their job needs
- Owners, doctors, receptionists and pharmacists each have their own login and permissions.
- Staff join only through a one-time invite link that works once, for 7 days, for the invited email.
- When someone leaves, the owner removes them and their access ends immediately.
Every look and change is logged
- Opening or changing a patient record, prescription, bill or stock entry writes a line in the activity log: who, what and when.
- The clinic owner can read the log on the Activity page. Nobody, including the owner, can edit or delete it.
Records that can't be quietly rewritten
- Once issued, a prescription can be read and printed but never edited or deleted.
- Bills are numbered in sequence and can only be cancelled with a reason, never deleted. Stock changes are kept as a ledger.
Sign-in protection
- 2-step login with an authenticator app. The clinic owner can make it compulsory for doctors.
- New passwords are checked against lists of passwords leaked in past breaches.
- Sign-in, sign-up, 2-step codes and password resets are rate-limited. Reset links work once, for 30 minutes, and sign out every device.
- Sessions use secure, HTTP-only cookies.
Encrypted in transit and at rest
- Every connection uses HTTPS (TLS). Strict security headers stop the site being framed or running injected scripts.
- Data is stored in a managed PostgreSQL database that encrypts it at rest (AES-256).
- Passwords, keys and secrets are never stored in our code.
What we will never do
These are promises about how DoctorKhata is built, not settings you have to find.
- Sell or share patient data
- Send patient data to AI services or any outside company
- Show adverts inside the app
- Touch your patients' payments: UPI goes straight to your bank
Your part
- • Give each staff member their own login. Never share one.
- • Turn on 2-step login, and make it compulsory for doctors.
- • Remove people from your team on the day they leave.
- • Look at the Activity page now and then.
Found a security problem?
Please tell us privately at hello@doctorkhata.in with the word "Security" in the subject. We read every report and reply within a working day.
Set up your clinic in two minutes
Add your clinic name and registration number, and you're ready for the first patient of the day.