Trust
How clinic and child data is protected
Tosai holds clinical records about children. This page sets out what is in place today. Where we hold no certification, we say so plainly.
Why this page exists
A paediatric therapy clinic handles about the most sensitive data there is: developmental history, clinical assessment results, and identifying details of children. If a vendor is asking you to move all of that off paper, you are owed a straight account of what happens to it.
What is in place today
- Role-based access control
- Access is scoped by role. Therapists see the children assigned to them. Parents see their own child. Administrative and clinical views are kept separate.
- Encryption in transit and at rest
- Data is encrypted as it moves between the browser and our servers, and again while it is stored.
- Sharing is a decision, not a default
- Draft notes, unsent bills and unapproved reports are never visible to families. Anything that reaches the parent portal is there because a clinician sent it.
- This website holds no clinical data
- The application runs on a separate authenticated host. No portal, dashboard or login route is reachable from this site, and none is exposed to search engines.
About the screens on this website
Every screen on this website uses demonstration data. The calendar, the three portal views and the sample assessment summary were built for the website. The children, therapists and figures in them are made up, and no real clinic record has been used.
The calendar in the hero, the three portal views and the sample assessment summary are mockups built for this website. If you want to see the product with your own configuration, ask for a demo rather than judging it from a marketing screenshot.
Security questions
Who inside the clinic can see a child's clinical notes?
Access is role-based. Therapists see the children assigned to them, and administrative roles see the operational and billing views their job needs. Parents see their own child, and only the items the clinic has shared.
Is data encrypted?
Yes, both in transit and at rest.
Are the screenshots on this site real patient data?
No. Every screen on this website uses demonstration data. Real clinic data is role-restricted and encrypted, and we do not use it in marketing material.
Bring your security questions to the demo
If your clinic has a checklist to work through before moving records off paper, send it ahead and we will answer it on the call.