Logo

Security


How Secure is Your Data?



At MedicTrust, we respect and value the confidentiality and integrity of your records. Our system is built on a solid and highly secure IT infrastructure. It is our policy that we do not share your data with any party. Your medical records are owned by you and managed by you, thus only you can decide to whom you want to share the data.


Security picture


Infrastructure
  1. Database

    We recognize that protecting the privacy and security of your data is an important responsibility, which is why all data is stored in a secure environment with protective measures including:

    • System installation using hardened, patched OS
    • System patching configured to provide ongoing protection from exploits
    • Data protection with managed backup solutions
    • Distributed Denial of Service (DDoS) mitigation

  2. Access

    Access to servers, including network protection, is secured through:

    • Dedicated firewall services to help block unauthorized system access
    • System access logged and tracked for auditing purposes
People
  1. Customer Care

    As the communication avenue between MedicTrust and its members, the Customer Care personnel is assessed through thorough background checks and rigorous interview processes prior to hiring. Upon joining MedicTrust, each employee must sign a Non-Disclosure Agreement and follow strict security guidelines. Furthermore, regular security awareness training programs are conducted to ensure that each and every Customer Care personnel implements the appropriate procedures to provide you with the best service.


  2. Developer

    It is our policy to assess future MedicTrust developers through thorough background checks and rigorous interview processes prior to hiring.Upon joining MedicTrust, each employee must sign a Non-Disclosure Agreement and follow strict security guidelines. The appropriate management guidelines are implemented to ensure that no developer is able to inappropriately breach into the system that may jeopardize the smooth running of the operation. Furthermore, developer authorization is rigorously implemented to ensure that each developer accesses the accurate and authorized information every step of the way.

Process
  1. User Confirmation

    User confirmation is required before MedicTrust can process your request. For instance, upon uploading your data or scheduling a courier service, a Customer Care personnel will personally verify with you, by email or phone, that the request being made is authentic. This is another measure we take to avoid possible human error, false intention, or any other unintended action.