Security, privacy and how your records are protected
Where patient information goes is one of the most important questions when you choose practice software. This page sets out how we protect clinic data, which service providers are overseas, and what we have not done.
How your records are protected
Each clinic’s data is kept isolated from every other clinic’s.
Backups are automated daily, and include an encrypted copy held off the main host.
Overseas service providers
Some services we rely on are overseas. They include our CRM and booking platform, video consults and error monitoring. We disclose each in our privacy policy under Australian Privacy Principle 8, which covers sending personal information overseas.
Some contact and appointment details sit with our CRM and booking platform provider, which is overseas and disclosed in our privacy policy.
If you ask us which provider sits behind a given feature, we will tell you, and the privacy policy lists them.
Read the privacy policy for the full list.
How clinics are kept apart
Each clinic’s data is separated from every other clinic’s at the database level.
Access is role based, so what a person sees depends on their job in the clinic. For example, reports are limited to management roles.
Protection of the data itself
- Data is encrypted in transit and at rest.
- Praxia keeps an audit trail of key actions.
- Staff sign-ins and patient links expire automatically.
We have chosen not to list technical numbers on a public page. They change as the product changes, and a stale number is worse than none. We are happy to go through specifics with a clinic during a walkthrough.
Why we are specific about this
Clinic owners are responsible for the information their patients trust them with. Choosing software means choosing where that information goes, and a vague answer makes the choice harder than it should be.
So we list what we run, in which place, and what we rely on that sits elsewhere. You can then judge it against your own obligations and your own patients’ expectations, and ask us for more where you need it.
This page will change as the product changes. When a service is added, removed or moved, the privacy policy and this page change with it.
Questions worth asking any software vendor
- Where do the application and the clinical records database run?
- Which services handle patient information outside Australia, and where is that disclosed?
- How are backups made, and where are they kept?
- Who in my clinic can see what, and how is that controlled?
- What certifications are claimed, and by whom?
We are glad to answer these for Praxia. The honest answers are on this page, and we will give you the same ones in a walkthrough.
What we have not claimed
We do not claim a security certification. We do not say Praxia is compliant with the Privacy Act. Praxia has been designed with the Australian Privacy Principles in mind, and the privacy policy is where the detail lives.
Praxia is a pilot with Evolution Medical Care, a clinic run by Praxia’s founders, and is being onboarded there now. Praxia Clinical Solutions is a company in incorporation, so some documents, including final terms, will follow.
If a clinic’s own policies require something specific, such as a particular certification or a data location, tell us early. A plain no now is better for both of us than a surprise later.
Questions clinics ask
How is my patient data kept?
Each clinic’s data is kept separate from every other clinic’s, and access within a clinic is role based. Some service providers we use are overseas, including our CRM and booking platform, video consults and error monitoring, and we disclose each under APP 8.
Does Praxia hold a security certification?
No. We do not claim one.
Are my backups encrypted?
Backups are automated daily and include an encrypted off-host copy.
Can another clinic see my data?
Each clinic’s data is separated from every other clinic’s at the database level, and access within a clinic is role based.
Where can I read the privacy policy?
On the privacy page. It lists the overseas services we rely on.
Request a walkthrough
If where records live matters to your clinic, bring your questions and we will answer them plainly.
Praxia is working with a pilot clinic, so we will tell you honestly whether it fits yet. We will reply to arrange a time.
Not ready to talk? Join early access and we will keep you posted.