Security & Compliance

MedFormkit is built for clinics and facilities that handle sensitive patient information. We design our infrastructure, access controls, and internal processes to protect clinical data and support common compliance requirements.

If your clinic or partners require specific contractual terms (including data processing agreements), we can review and provide appropriate documentation as part of onboarding.

Access to patient data within a clinic account is role-based, so staff only see the records relevant to their responsibilities. We maintain internal policies covering data handling, incident response, and periodic access reviews.

MedFormkit runs on infrastructure providers that maintain physical security controls for their data centres, including restricted facility access, surveillance, and environmental protections.

We apply the following technical controls to protect data in the platform:

If we become aware of a security incident affecting clinical data, we will notify affected clinics without unreasonable delay, consistent with our contractual and legal obligations, and provide the information needed for your clinic to meet its own notification requirements.

Clinics remain responsible for responding to patient requests regarding their own records, such as access or correction requests. MedFormkit provides the tools clinic administrators need to locate, export, or amend a patient's data on request.

Team members with access to production systems receive training on data handling practices and confidentiality obligations before they are granted access.

We periodically review our safeguards as the platform grows and as regulatory guidance evolves, and we update our practices accordingly.

For security or compliance questions, reach out to compliance@medformkit.com.