Patient records are the most sensitive thing a clinic holds. Gompha is built so your data is isolated from every other clinic, backed up, walled off by role, and never held hostage โ here's exactly how.
These are live in the software today โ not a policy page, but how it's actually built.
Every clinic is its own tenant on its own subdomain, with row-level security forced at the database itself. A clinic literally cannot query another clinic's records โ it's enforced below the app, not just inside it.
Your data is backed up every hour, encrypted with a modern age key before it ever leaves the server, and stored off the main box. A bad day doesn't mean a lost clinic.
People only see what their job needs. Maintenance configures the software with zero access to any patient data; reception can take money but never see clinic totals; each doctor's earnings stay their own.
Sessions time out by role, every device is recorded, and a "Your devices" panel lets you sign a lost or stolen phone out from anywhere โ instantly.
If you ever stop paying, writing pauses โ but you can always read your entire clinic. Even a suspended or expired account keeps full read access to every record. No one locks you out of your own history to force a renewal.
And you'll be able to take it with you: self-serve export of your whole clinic, and clean import into a new tenant, are on the way โ Planned. Full story on Scaling & ownership.
Ask us anything about itTrust in a clinic system comes from knowing the history is honest and the boundaries hold.
Payments aren't edited or deleted โ they're voided, leaving a trail. Balances are derived, so the ledger can't silently drift.
Who can see totals, costs and earnings is enforced per role โ a receptionist posts a payment without ever seeing the clinic's numbers.
Patients belong to a doctor; another doctor gets access only through a request the owner approves โ scoped and audited, not open by default.
A per-staff activity log โ who booked, who took each payment โ so accountability is on the record, not on memory.
Gompha is built for a cash, real-world market โ we focus on concrete safety (isolation, encryption, backups, walled access), not compliance paperwork. Have a specific security question for your clinic? Just ask.
See it running with real seeded data โ then ask us the hard questions.