Security
Hospitals trust us with some of the most sensitive data there is. Here's how Vitrae HMS is built to protect it.
Every hospital's data is kept completely separate. One hospital can never see or query another's patients, staff, or records.
Fine-grained permissions down to individual actions — a receptionist, doctor, and finance officer each see only what's relevant to their role.
Optional MFA for staff accounts, adding a second layer of protection beyond passwords for sensitive roles.
Every access to and change on a patient or financial record is logged, so hospitals can answer "who did what, and when" with confidence.
All traffic between your browser and Vitrae HMS is encrypted using industry-standard HTTPS/TLS.
Secure sign-in with session management, login history, and the ability for hospital admins to deactivate staff access immediately when needed.
We design our access controls, audit logging, and data handling practices with the data protection frameworks across our markets in mind — including Nigeria's NDPA, South Africa's POPIA, Kenya's Data Protection Act, and Ghana's Data Protection Act. See our Privacy Policy for details on how we handle personal and patient data.
If you've found a potential vulnerability or have a question about our security practices, reach out directly.
hello@vitrae.health