Talk to sales
Trust centre

Security, privacy and where your data lives.

Everything an IT lead, data-protection officer or procurement team needs to evaluate Nedhara, in one place. If something is missing, ask and we will answer in writing.

Choose where your data lives

Each clinic chooses its data region when it signs up, based on where it practises. Patient data stays in that region.

US and Canada

For clinics in the United States and Canada.

EU and UK

For clinics in the European Union and the United Kingdom.

Gulf

For clinics in the United Arab Emirates and Saudi Arabia.

India and Asia-Pacific

For clinics in India, Australia and the wider Asia-Pacific region.

Enterprise customers can also discuss an on-premise deployment. Clinics outside these regions: talk to us about the nearest suitable region.

Security at a glance

Sign-in

Individual accounts for every staff member, no shared logins. Two-step verification (MFA) on every plan. Single sign-on (SSO) on Enterprise.

Access by role

Permissions are set by role and module across a twelve-capability matrix. Each person sees only what their work needs.

Audit trail

Every view, edit, print and export of confidential documentation is logged with name and time. Exports, after-hours and off-network access are flagged for review.

Encryption

Data is encrypted in transit and at rest.

Backups

Scheduled backups with restore points. Clinic data is kept separate on shared infrastructure.

Your data, your exit

Records export in standard formats at any time, without asking us.

Documents for your evaluation

Available on request during evaluation. Email [email protected] or use Talk to sales.

Data Processing Agreement

Our standard DPA for clinics that need one under GDPR or similar laws.

Business Associate Agreement

For US clinics covered by HIPAA. Ask us about availability for your plan.

Sub-processor list

The services we use to run Nedhara, by category and region.

See sub-processors

Security overview

How Nedhara is built, hosted and operated, written for IT and procurement.

Security questionnaires

We complete standard vendor questionnaires for Enterprise evaluations.

Certification status

We list certifications only once they are complete and independently verified. Ask for the current status.

Laws we design for

“Designed to align” describes how Nedhara is built. It is not a certification or an independent audit, and compliance also depends on how each clinic deploys and uses the system.

United States

HIPAA

Canada

PIPEDA

European Union and United Kingdom

GDPR and UK GDPR

Gulf

PDPL (UAE and Saudi Arabia)

Australia

Australian Privacy Principles

South Africa

POPIA

See countries and regions

Report a security issue

If you believe you have found a security vulnerability in Nedhara, email [email protected] with the subject “Security”. Please give us reasonable time to fix it before sharing it publicly. We will acknowledge your report and keep you informed.

Service status

Bring your information-governance questions.

We would rather answer them before you buy than after.