Patient records deserve care
These are the controls built into ClintoBytes today — not promises for later.
Each hospital kept apart
Every hospital has its own separate database area. A sign-in belongs to one hospital and is refused at any other.
Branches and roles
Staff see only the branches they are given, checked on every request, and only the modules their role allows.
Two-step sign-in
A hospital can require a code from an authenticator app, role by role. Repeated wrong passwords lock the account for a while.
Audit trail
Changes to bills, payments, prescriptions, admissions, clinical notes and user accounts are recorded with who made them and when.
Records that can’t be quietly changed
A signed note is never edited: a correction is a new version with a reason, and the original stays readable.
Stored credentials encrypted
Passwords are stored as one-way hashes, and the keys a hospital saves for its storage, SMS or WhatsApp accounts are encrypted.
Backups
The database is backed up regularly to separate cloud storage, and a hospital’s data can be restored from a backup.
AI under the hospital’s control
The hospital decides whether AI features are used at all, and can require each patient’s consent before AI processes their record.
Who is responsible for what
Your hospital decides what patient data is collected and why. ClintoBytes processes that data on your hospital’s behalf, to run the software — as a data processor under India’s Digital Personal Data Protection Act, 2023. A Data Processing Agreement sets out these terms.
Where the data is
The application and its database run on servers in Bangalore, and backups are kept in Mumbai. Some optional features send data to other companies: AI drafting, speech-to-text, and SMS or WhatsApp messages. They are used only when your hospital switches them on, and some of these providers process data outside India. The full list is on the sub-processors page.
How we handle the details of people who contact us is in our Privacy Policy.
Reporting a security issue
Write to security@clintobytes.health. Please don’t include patient data in your message.
See it with your own workflow
A 45-minute online demo, walking a patient visit the way your hospital works.