Health data security designed for Morocco's law 09-08 Hosted in Casablanca and each person sees only what their work needs
ClinicareOS protects patient files at every step: hosting in Morocco, role-based access, screen lock, new-device checks, alerts for management and a complete history.
Your patients' data is hosted in Morocco And each person sees only what their work needs
Servers in Casablanca The database and the files are hosted in Morocco, with an encrypted backup every night.
Access by job Reception, nursing, billing and management see what their work needs, in their own facility.
A full history Every change keeps its author and its date. Every opening of an ID card photo is logged.
Screen lock After 15 minutes without activity, by default. A personal 4-digit code reopens it.
New device A sign-in from an unknown device asks for a verification code, or notifies management.
Management in the loop A sign-in from outside Morocco, an account paused after wrong passwords: each alert reaches them.
Built for law 09-08 The clinic stays in control of its patients' data
Controller and processor
The clinic is the data controller; ClinicareOS acts as processor and provides the list of its technical sub-processors for the CNDP filing.
Need-to-know access
Each team sees what its work needs, in its facility. Sensitive views are logged.
Encrypted backups
An encrypted backup every night, a copy kept off the server, and a restore already tested.
About security Management's and doctors' questions
Where is the data hosted?
In Casablanca, on servers located in Morocco. An encrypted backup is made every night.
What if a computer is left open?
The screen locks after 15 minutes of inactivity, by default, and reopens with a personal 4-digit code.
And a sign-in from an unknown device?
It asks for a verification code, or alerts management. A sign-in from abroad is reported too.