Practice isolation and access controls
The system separates practice data, associates requests with a practice context and checks identity and permissions on protected routes. Practice administrators manage user access according to responsibilities. Review permissions regularly and use individual accounts.
Sign-in and session protection
The system includes password hashing, session management and request limits on sensitive endpoints. Additional verification mechanisms depend on account type and platform settings. Never share passwords or verification codes and sign out on shared devices.
Connections and stored data
Use HTTPS to protect the connection between your browser and the service. Protection of stored data and backups also depends on hosting, storage and key management settings. We do not describe patient records as end-to-end encrypted: the server needs to process them to provide application features.
Private booking tracking
Appointment tracking uses a private random token instead of public lookup by patient phone number. The tracking link and QR code grant access to booking status, so do not publish them. Booking creation and tracking are rate limited, and the server validates booking choices and availability.
Backups and logs
The system provides database backup, export, restore and integrity verification tools, with logs for administrative actions and selected events. Backup scope, schedule and location follow operational settings; database backups do not automatically include every attachment. This page does not guarantee a recovery time or maximum data loss.
AI and external services
Some features rely on external payment, email, storage or AI providers. Data minimization and redaction of some identifiers do not guarantee anonymity in every case. Avoid sending unnecessary health information to the assistant and review the privacy policy for processing details.
Scope of this page
This page describes product safeguards. It is not a HIPAA, PIPEDA or other compliance certification and does not guarantee that incidents cannot occur. If your practice needs a data processing agreement or specific hosting or compliance requirements, contact us to verify them before entering patient information.
Reporting a security concern
Send a brief description and reproduction steps to support@dent-ix.app. Do not include passwords, tracking tokens or patient records. If your account is affected, stop using exposed credentials and inform the practice administrator.