Security & Privacy

Designed with Canadian healthcare privacy and security in mind

Healistock is built for Canadian family clinics. We design our platform with Canadian healthcare privacy and security requirements in mind.

Security capabilities

Encryption in Transit

Data is encrypted as it moves between your devices and Healistock servers.

Encryption at Rest

Stored data is encrypted to protect inventory records and account information.

Multi-Factor Authentication

Staff accounts can be protected with MFA to reduce unauthorized access.

Role-Based Access Control

Permissions are scoped to each team role — owner, manager, nurse, assistant, finance.

Audit Logging

Key actions are logged so your clinic can review who did what and when.

Tenant Isolation

Each clinic's data is isolated from other organizations using the platform.

Data management

Backups

Data is backed up to support recovery and protect against loss.

Disaster Recovery

Recovery procedures are in place to restore service in the event of an incident.

Data Retention

Inventory data is retained according to your subscription and clinic needs.

Data Export

Clinics can export their inventory and purchasing data.

Data Deletion

Clinics can request deletion of their data when they leave the platform.

AI Data Handling

Heali, the AI assistant, works with your inventory data to answer questions and does not perform clinical diagnosis.

Incident Response

Healistock maintains processes to detect, respond to, and communicate about security incidents affecting clinic data.

Subprocessors

Healistock uses trusted subprocessors for cloud infrastructure and related services. A list of subprocessors is available to enterprise customers on request.

Canadian Data Residency

Healistock is designed for Canadian clinics and is working toward providing Canadian data residency options. If Canadian hosting is a requirement for your clinic, please contact us to discuss current and planned capabilities.

Privacy Contact

Questions about privacy or security?

We’re happy to walk your team through how Healistock protects your clinic's data.

Contact Us →