How Stator protects patient records

Every patient, note, appointment and bill in Stator belongs to one clinic. The database checks each read and each change against the clinic the person signed in to, so one clinic's staff can't see another clinic's patients. The database runs that check itself, on top of the app's own checks.

Each staff member has their own login and one role: admin, head physio, physio, front desk or accountant. The role decides what they see. Physios never see prices, and a patient's home address shows only to the desk, the admin (owner), the head physio and the physio booked for that visit.

The admin locks or deactivates their account under Users and access. Their access stops straight away and they're signed out on every device, while their notes and the record of what they did stay. Resetting the password doesn't reopen a locked account, and an admin can't lock their own.

Changes to patients, notes, appointments, invoices, payments, HMO claims, documents and exercise programmes go into an audit trail, with who made each change and when. Opening a patient's chart and exporting a PDF are recorded too. The app can add to the trail but can't edit or delete anything in it.

Staff reset a forgotten password from the sign-in page, with a link sent to their email. The page gives the same answer whether or not an email address has an account, and repeated requests are limited.

Every connection to Stator uses HTTPS, and browsers are told never to use an unencrypted connection to it.

The database is backed up every night. Each backup is encrypted before it's written, and encrypted copies are kept for 90 days.

A patient gets into the app only when their clinic invites them: the desk sends a one-time sign-in link by email or on WhatsApp. A family member gets their own sign-in only with the patient's consent, which the clinic records, and the patient can remove them.

By default, the app shows no clinical notes. A clinic can choose to show parts of approved notes, such as the goals and plan, and decides which parts.

If you think you've found a security weakness in Stator or on this website, email hello@statorhealth.com with "Security" in the subject. Tell us what you found, where, and the steps to see it. We acknowledge every report within 2 working days and keep you updated until it's fixed.

If you look for weaknesses in good faith and follow these rules, we won't take legal action against you or report you to the authorities. The rules: test only against your own account, or a demo clinic we set up for you if you ask; stop as soon as you see any patient, staff or clinic data, don't copy or keep it, and tell us what you saw; and give us reasonable time to fix the problem before you tell anyone else.

Out of bounds: any live clinic's data, denial-of-service or load testing, social engineering or phishing of clinic staff or of us, physical access, spam, and the services of other companies we use, such as Cloudflare, Resend and Google. We don't pay rewards for reports, but we're glad to thank you by name once the fix is live, if you'd like.