Security and data
Built to look after patient data
Here's what we do to keep your pharmacy's and your patients' data safe, in plain words.
Data stored in the UK
Your data is stored in London (AWS eu-west-2, through our database provider Neon) and the app runs in Vercel's London region.
Each pharmacy kept apart
Every pharmacy's data is separated by row-level security in the database itself, not only by the app.
Access by role
Owners, pharmacists, technicians, counter staff and locums each see and do only what their role allows.
Pharmacist sign-off
Questionnaires are signed off by a pharmacist, and answers that need a look wait for a pharmacist's decision. Only a pharmacist authorised under the PGD can sign off a supply.
An audit log
Changes to bookings, payments, refunds, questionnaires, patient details, consent, the team and reviews are recorded: who, what and when. Downloads are recorded too, and every view, print and sign-off of a consultation record.
Signed records stay as signed
Once a pharmacist signs a consultation record, it is locked, in the database itself as well as the app. Corrections are dated addenda by a named pharmacist, and the original is kept.
PGDs and GP letters kept private
PGD files and GP letters are kept in private storage, with no public web address. They open only through the app, for staff whose role allows it.
Consent on record
Each patient's marketing consent is kept per channel with the wording they saw and when. Unsubscribes and STOP replies are honoured automatically.
Support access with limits
If our team needs to look into a problem in your account, they record why, for 2 hours at most, under their own name, with a banner on screen. Payments, team changes, marketing sends and downloads are blocked, and everything is recorded.
Sessions that end
Staff are signed out 12 hours after signing in, and the dashboard locks after an hour without use until they confirm it's them with a code or passkey. Patients stay signed in for 24 hours, or up to 30 days on a device they choose to trust, and confirm it's them again before seeing health answers or changing their details.
Cards stay with Stripe
Card details go straight to Stripe and never touch our servers. Every page is served over HTTPS only, with modern security headers.
Database backups and point-in-time restore are provided by our database provider, Neon.
Your database is stored in the UK. Some services we use to run the platform may process data outside the UK under their own data protection terms: Stripe (card payments), Resend (email), Divergent (text messages) and Google (the health check, and address suggestions: only the text typed into the address lookup is sent, never a name or any other details).
Your pharmacy decides what patient data it records and why; we give you the records, consent history and audit trail to show it.
Who provides the service
Pharmacy Services is provided by Karad Infotech Ltd, registered in England and Wales, No: 11541799. Your pharmacy is the data controller for its patients' data; Karad Infotech Ltd processes that data on your pharmacy's behalf, as its data processor. Karad Infotech Ltd is registered with the Information Commissioner's Office, registration number ZB016453.
Our data processing terms are available on request: connect@karadinfotech.com.
Karad Infotech Ltd, 124–128 City Road, London EC1V 2NX · 020 4516 9416Questions about data?
Book a demo and ask us anything about how your patients' data is kept.