FyzioPlan Try it free

Trust Center

Security and compliance

The security of health data is FyzioPlan’s main promise. That is why we only list what is in place and documented.

What it means for your practice

  • You see only your own practice’s data. Nobody from another practice can see it, and you cannot see theirs.
  • Owners and admins sign in with two factors – a code from an app on their phone. Without it the app shows no data.
  • A signed record cannot be changed or deleted. A correction is a new version and changes go into the audit log.
  • Data is stored only in the European Union.
  • No advertising or tracking scripts. Check it yourself in your browser (Developer tools → Network).
  • You can download all practice data any time in one step, and the data processing agreement is included.

Measures in detail

Data in the EU

In place

The application database and files are stored only in data centres in the European Union.

How we check it: The database and file storage are pinned to an EU region; the same applies to backups.

Updated:

Practice isolation and encryption

In place

Each practice sees only its own data: the database enforces isolation with rules on every table (Row Level Security) and isolation tests run on every change. Birth numbers, insurance numbers and contacts from online bookings are encrypted at column level.

How we check it: On every code change we automatically run tests proving that practice A can never see practice B’s data; a change without passing tests is not accepted.

Updated:

Sign-in with two-factor authentication

In place

Practice owners and admins see no data without two-factor authentication – enforced by the database, not the screen. A clinic can only be created after it is set up.

How we check it: The rule lives in the database and is guarded by an automated test; we also check that it cannot be bypassed through the application.

Updated:

No tracking

In place

There are no third-party advertising or analytics scripts in the app, the booking page or the widget; security headers (CSP) block foreign scripts. This website uses no cookies and no analytics. You can check it yourself in your browser developer tools.

How we check it: An automated test on every change checks that neither the application nor this site loads anything third-party or sets cookies.

Updated:

GDPR: who is who

In place

The practice is the controller of its patients’ data; the operator of FyzioPlan (Relentra s.r.o.) is the processor. The data processing agreement is accepted at sign-up and included in the price. Patient consents, read audit of records and export for the patient are in the app. The downloadable DPA text is in preparation.

How we check it: The controller and processor roles and the consent procedure are written down; the database records the reading audit automatically.

Updated:

Medical records

In place

A signed record cannot be changed or deleted: a correction means invalidation and a new version. The database itself writes every data change into the audit log. Record integrity can be verified in the app. Connection of a qualified time stamp is in preparation.

How we check it: The database itself protects signed records and keeps the audit, guarded by automated tests; a practice can verify integrity in the application.

Updated:

Incidents and vulnerability reports

In place

We have a written security incident procedure: we inform the affected practice without undue delay (target within 24 hours) and hand over the material for its own notification. You can report security issues to us by e-mail (see the end of the page).

How we check it: The procedure is written down with contacts, deadlines and material for the affected practice; vulnerabilities are received at a single e-mail address.

Updated:

Backups and restore

In place

An encrypted backup outside the database provider, separate key escrow and restore into an empty database with fingerprint checks are part of the operating procedures.

How we check it: We regularly rehearse restoring a backup into an empty database and check that the data matches byte for byte.

Updated:

AI note assistant: principles

In place

The AI note assistant helps dictate a note and proposes its structure; it does not diagnose or recommend treatment to patients, and the therapist always decides and signs. The proposal is labelled as an AI draft. Data is not used to train models, birth numbers are never sent to AI, a recording can be deleted, every call is audited and the provider has a DPA and an EU region.

How we check it: The rules are written in advance and apply to every AI feature; compliance is guarded by the audit of every call.

Updated:

What we do not claim

  • We have no independent penetration test and do not claim one has been done.
  • We hold no ISO 27001 or other certification and do not claim to.
  • FyzioPlan is not a medical device.

Technical documentation

We provide technical documentation (architecture decisions, operating procedures, test results) to clinics on request. Write to us.

Found a security issue? Write to info@fyzioplan.cz with “Security” in the subject.