Security
Healthcare information deserves thoughtful protection.
Security is built into how SmartPilot stores and shares data, not added at the end.
How SmartPilot is built
Organisation isolation
Every record belongs to one organisation. Database rules stop one clinic from reading another's data.
Role-based access
Owners and admins manage the organisation; staff can't change settings or roles. Each role only sees and changes the areas the clinic allows it.
Location-level access
Staff can be assigned to the branches they work at, and the app shows them those branches.
Department-level access
Permissions are being organised by area — clinical, billing, pharmacy and more.
Private documents
Patient files sit in private storage and open only through links that expire in minutes.
Audit trails
Finalised prescriptions, bills and lab reports lock, and changes leave a record.
Secure authentication
Verified email sign-in for staff and one-time codes for patients.
Encrypted transport
All traffic between your browser and SmartPilot is encrypted.
Being straightforward about compliance
We don't claim certifications we haven't earned. If your organisation has specific compliance requirements, talk to us and we'll explain exactly how SmartPilot handles them.
Have a security question?
Our team will walk your IT or compliance lead through the details.