Patient data is sacred to us
We've built AmritSmile with security at the core — not bolted on. Here is exactly what we do to protect your clinic and your patients' data.
Security by design
All traffic is encrypted with TLS 1.2/1.3 and a hardened cipher-suite configuration, with HSTS enforced across every production domain. At-rest encryption for stored data is on our security roadmap.
Every user has a role: doctor, receptionist, admin, or owner. Each role sees only what it needs, and every permission check happens on our servers on every request — not just hidden in the screen — so one clinic, or one staff member, can never reach another’s data by going around the interface.
Your login session is never written to browser storage, so it can’t be lifted from a stolen laptop, a rogue browser extension, or old devtools data. The short-lived access token lives in memory for that tab only; the session that keeps you signed in is a secure, HttpOnly cookie no webpage script — including ours — can ever read.
Every create, update, delete, login and logout is logged with a timestamp and user identity, so you can always see who changed what and when.
Hosted on a dedicated virtual private server in India, secured with key-only SSH access, a default-deny firewall, and automated intrusion prevention that blocks abusive IPs. Dedicated DDoS / WAF protection is on our near-term roadmap.
A full backup runs automatically on a regular schedule and is stored offsite in a dedicated, access-controlled cloud storage location, separate from the production server, in addition to a rolling local copy — retained for 30 days.
Every change is built and reviewed before it ever reaches production — there is no automated pipeline that can push unreviewed code live. We have not yet commissioned a formal third-party penetration test; it’s on our roadmap as we scale.
Patient scans, reports and videos are stored in a private, access-controlled bucket behind a CDN — never a public or permanent link. Every file is served through a signed URL that expires quickly, and access is gated per staff member.
Deleting a file never destroys it on the spot. It is moved to a restricted, time-limited archive with a full record of who deleted what and when — so an accidental delete is recoverable, not a data-loss event.
Responsible disclosure
If you discover a security vulnerability in AmritSmile, please report it to us privately. We investigate all reports and respond within 48 hours. We do not pursue legal action against good-faith researchers.
Report a vulnerability