Security

Curogrid runs on Amazon Web Services in the Mumbai region. Clinic and patient records are stored in India.

Every clinic is a separate tenant. A person signed in to one clinic cannot open another clinic's patients, bills or reports.

• The database's storage is encrypted.
• The connection between your browser or phone and Curogrid is encrypted (HTTPS).
• The database accepts connections only from Curogrid's own server, not from the internet.

The database is backed up automatically every day, and each backup is kept for seven days.

• Each member of staff has their own login.
• Each login has a role. You decide what each role can open: a receptionist need not see clinical notes, and a doctor need not see the accounts.
• An audit log records who did what.

Curogrid does not hold a security certification such as ISO 27001 or SOC 2, and we will not use those names until it does. No system is perfectly secure. What we can do is tell you plainly what is in place.

If you believe you have found a security problem in Curogrid, write to support@curogrid.com. We will reply.