Built like it holds medical records. Because it does.

Every clinic sealed off, every change with a name and a time, and backups we prove by restoring them.

Activity, Saturday 24 October

Every clinic is sealed off.
Each request has to prove which clinic it belongs to. If it can’t, it’s refused, never guessed. A form link sent to a patient opens that one form and nothing else.
Signed means fixed.
Signed charts and finalised notes can’t be edited, by anyone, on the server. A correction is an amendment beside the original, with who and when.
Roles are checked on the server.
Reception, assistants, dentists, billing and owners each get the screens their work needs. The server applies the same rules, so hiding a button is never the only lock.
The money reconciles.
Ledgers are kept to the fils. Refunds need an approval. Reports read whole periods and say so plainly when they can’t, instead of showing a partial total.
Patient data stays where it belongs.
No patient data in logs, screenshots or test environments. Our staging clinic is full of invented people, like the ones on this site.
You can leave.
Export everything your clinic has stored, records and files, with a checksum for each. Arriving is just as plain: a patient list from a spreadsheet, duplicates shown first.

Backups we restore.

A backup you’ve never restored is a hope. We restore ours in drills, on synthetic clinics, and check what comes back.

Latest drill, 20 September 2026. Files byte-identical, ledger reconciled.

Where data lives, who can see it, what happens when something fails. Write to us and we’ll answer specifically, not with a badge.