Client records are health information, so we describe plainly what Electrolog does to protect them today, and what we do not claim.
Email addresses, phone numbers, dates of birth, notes, treatment settings, SOAP notes and signed forms are encrypted by the application before they are stored.
The encryption key is held separately from the database, so a copy of the database on its own does not reveal them.
Every person who uses Electrolog must set up a second sign-in step, an authenticator app or a passkey, before they can reach any client record.
A password on its own never opens the application.
If a session is left idle for 15 minutes, the person is signed out.
A warning appears two minutes before, and activity keeps the session open, so a tablet left on a counter does not stay signed in.
Electrolog records who viewed or changed client records, and when.
The record holds identifiers and field names, never the client’s information itself, and the application is not able to edit or delete it.
One practice cannot see another practice’s clients, courses, sessions or forms.
Every request is limited to the signed-in practice, and automated tests check that another practice’s records cannot be reached.
A practice owner can export a complete copy of one client’s record, and can permanently delete a client’s data once the retention period has ended.
Deletion is refused until the retention date has passed, and it removes the client’s notes rather than keeping an anonymised copy.
Once a chart is completed it is locked. Corrections after that are added as dated addenda.
Only an owner can reopen a completed chart, after confirming their identity again, and the reopening is recorded.
People see and change only what their role allows, and a reviewer can be limited to reading.
Permissions are checked on every request. A practice can invite staff as admins, practitioners, front desk or reviewers.
Electrolog does not sell client data, show advertising or run marketing to a practice’s clients.
Electrolog is used by practitioners; clients never sign in.
Questions about any of this? Write to hello@electrolog.app.