Your patient and clinical data is held with established cloud providers and encrypted in transit and at rest. The database is backed up every night. Remote access is limited to what's needed for support, security or incident response, with safeguards in place.
This applies to every account. There's nothing to find and switch on.
How your data is protected
- Encryption. Data is encrypted in transit and at rest.
- Access control. Every team member has their own login and a role (owner, manager, practitioner or receptionist), and you can turn on two-factor authentication.
- Audit trail. Significant actions, including every export, are written to an audit log.
- Nightly backups. The database is backed up every night, and the backups are encrypted.
- Your data is yours. The clinic owner can download all the clinic's data as a ZIP, or just the patient list as CSV, from Settings → Data at any time, on every plan.
Where it's hosted
- Your database — patient records, appointments, clinical notes and invoices — runs in Railway's EU West region.
- File uploads — patient files, letters and logos — are kept in Cloudflare's EU region, and are only ever served through short-lived signed links, never public URLs.
Sub-processors
A few trusted providers process data on Atlacare's behalf — for email, SMS, payments and error monitoring. A small number operate outside the UK/EEA (for example, the provider that sends product email to clinic account owners, which never receives patient data); those transfers are covered by the Standard Contractual Clauses and the UK International Data Transfer Addendum. Every provider, what it handles and where it operates is listed in Who are your sub-processors? and on our sub-processors page.
What we never do
Atlacare never sends patient health information to marketing tools, and never uses patient data to train AI. Transactional messages carry only what's needed — a name, an appointment time, an invoice total in £.
Need something in writing for your own records or a client's due-diligence request? Use the Help button in the top bar and we'll help.