Patient data belongs to the organization — and only the organization.
heydoxi is built with privacy-by-design. Every query is scoped to the caller's organization, every sensitive access is logged, and cross-organization sharing is denied by default.
Every clinical table has database-level policies. RLS is the authoritative gate — never just the frontend.
Doctors in Organization A cannot see anything in Organization B, even if they belong to both accounts.
Reports and letterheads live in private buckets. Reads use short-TTL signed URLs, never public links.
Owner, admin, branch admin, doctor, nurse, receptionist, lab and billing roles — configurable per organization.
Finalized prescriptions cannot be silently edited. Any correction creates a new versioned prescription.
Login, patient view, prescription finalize/download, report view and permission change events are all recorded.
Cross-organization patient record access is denied by default and always audited when granted.
Email verification, password reset, session/device management and optional 2FA-ready architecture.
We keep the architecture ready for healthcare compliance frameworks. We don't claim certifications we haven't earned.