Security & Compliance
Built for trust. Designed for healthcare.
A hospital that works with MedQore shares its patients’ requests and access to its own systems. This is how the platform is built to protect both, and how to ask for our security documentation.
How the platform is built
The safeguards below describe how the platform is built.
Separation
Each hospital apart
Every provider runs with its own configuration, credentials and data, separated from the others.
Access by role
Administrators, staff and reception each see what their role requires, and a hospital sees only its own operation.
Control
The EHR stays the source of truth
Patients, treatments and bookings live in the hospital’s own system. MedQore works through it rather than replacing it.
One controlled path for every change
Every booking, change and cancellation follows the same ordered path to the EHR, and is confirmed only once the EHR has registered it.
Traceability
Every action traced
Each action can be traced to the conversation it came from, with no patient data in the trace.
Built to be dependable
Duplicate bookings are guarded against.
Intelligence boundaries
Reads, never writes
MedQore Intelligence changes nothing. Changes go through the hospital’s own workflows.
Aggregates, not patient lists
Answers are given as aggregates, and what is unknown is shown as unknown.
Compliance documentation
Our security controls and the documents behind them are kept current in the MedQore Trust Center.
MedQore Trust Center
Visit the Trust Center (opens in a new tab)Security controls
The controls MedQore maintains across infrastructure, organisation, product and data, with their current status.
Documents on request
Request access in the Trust Center. Restricted documents are shared after approval, under NDA where required.
Data processing
Our data processing terms and the providers that process data on MedQore’s behalf are available to customers and hospitals evaluating MedQore.
We list a certification or attestation only once it has been issued.
Security questions
Evaluating MedQore for your hospital? Ask us to walk your team through the architecture and how it is secured.
Reporting a vulnerability
If you believe you have found a security vulnerability in MedQore, please write to marc@medqore.ai. We will acknowledge your report and keep you informed while we investigate. Please don’t access data that isn’t yours, disrupt the service, or share details publicly before the issue is fixed.