Security

Access

• Staff sign in with a one-time code sent to their own email address. A code works once and expires after ten minutes.
• MediCRM can also ask for a code from an authenticator app.
• Each person sees only what their role or access level allows. Administrators decide who has access.

Data in transit and at rest

• Every page and API call uses HTTPS.
• Secrets, such as email passwords and channel tokens, are stored encrypted (sealed with AES-256-GCM) and are never shown again after they are saved.

Hosting

The software runs on servers that the operator manages, on Oracle Cloud Infrastructure. MediPlan can also be installed on a clinic's own server.

Reporting a problem

If you think you have found a security problem, email hello@bookmed.org. Please do not test it on data you do not own.