Skip to content

Data protection

Patient records that never leave your hospital

Protecting patient data is at the core of how Heka SoftLink is built. The most important measure is the simplest: your records are kept on your own server, not in ours.

Your Data Stays On Site

Patient records live on a server inside your hospital, not in someone else's data centre.

  • Installed on your own server
  • Used over your own network
  • We do not host or hold your records

Access Controls

Each person sees and does only what their job needs.

  • Roles for every desk
  • Permissions granted per person
  • Accounts managed by your administrator

Built for Shared Terminals

Nobody works under someone else's name, even at a busy desk.

  • One-press screen lock, and automatic when idle
  • The next person signs in as themselves
  • Repeated wrong passwords pause the terminal

Audit Logging

Every clinical and financial change carries a name and a time.

  • Who made each change, and when
  • What a record said before
  • Amended results and voided bills keep their history

Nightly Backups

Your records can be restored if a disk fails.

  • Encrypted database backup every night
  • Written to a second physical disk
  • A documented monthly restore drill

Nothing Private in Plain Sight

Patient details are kept out of the places they leak from.

  • Never in web addresses or log files
  • Searches sent in the request body
  • Connections encrypted with TLS

Data location

Heka SoftLink is installed on a server in your hospital, either your own or one we supply. Staff reach it over your local network through a web browser. Patient records are stored there and nowhere else, so no record crosses a border or leaves your building.

Backup and recovery

Every installation is set up to protect your records from hardware failure:

  • An encrypted backup of the whole database every night
  • Backups written to a second physical disk, separate from the system disk
  • A documented monthly drill that restores a backup to prove it works

Reporting a security concern

If you discover a security vulnerability or have a concern about how patient data is protected, contact our security team at security@hekasoftlink.com.