Where your data lives
Clinic data, including patient records, visits, prescriptions and bills, is stored in India, in a data centre in Mumbai, with our database provider Supabase on Amazon Web Services. The app itself is served through Cloudflare's network. Our privacy policy lists every service provider that handles data.
How it's protected
- Encrypted in transit (HTTPS everywhere) and at rest.
- Each clinic kept separate by database-level access rules, so one clinic can never read another's records.
- No passwords to leak. Staff sign in with a one-time code sent to their email, and sessions expire.
- An audit trail of important changes inside each clinic.
Who can see what
Inside your clinic, each person signs in with their own email and role. Owners see everything, including reports and settings. Doctors work with patients, case sheets and prescriptions. Receptionists handle appointments, patients, billing and stock. Our team accesses clinic data only when you ask for support, to keep the service secure, or when the law requires it.
The DPDP Act
Under the Digital Personal Data Protection Act, 2023, your clinic is the data fiduciary and DentoBlaze is the data processor: we process patient data only on your instructions. The app helps you meet your side: it records patients' WhatsApp consent with its history, limits access by role, and keeps an audit trail. Our commitments as a processor are in the draft terms. For the clinic's duties, see our DPDP guide for clinics.
Your data is yours
Export everything to Excel, and bills and prescriptions as PDFs, at any time, without asking us. No lock-in: if you leave, you take your records with you. We never sell clinic data or use it for advertising.
Report a concern
If you think you've found a security problem, or have a privacy question, write to support@dentoblaze.com with "Security" or "Privacy" in the subject.