Role-based permissions
Administrators assign modules and actions by role, facility and department. Staff see the patient information they need to do their job.
Security
Patient data deserves hospital-grade controls
Role-based access, tenant isolation, audit trails and scheduled backups are part of the platform, not an enterprise add-on.
Role-based
Access by default
Tenant isolation
Each hospital’s records are separated at the application layer. Cross-tenant access is not part of normal operation.
Audit trail
Sensitive actions such as record access, permission changes and publishing are written to an audit log.
Scheduled backups
Databases are backed up on a schedule with encrypted storage and documented restore procedures.
Encrypted transport
Public sites and application traffic use HTTPS. Custom domains have visible SSL status in Website Studio.
Incident response
Security issues are triaged, contained and documented. Enterprise customers receive a named escalation contact.
Data handling principles
Quick95 is designed for hospital operations in Myanmar. We collect only the data needed to operate the service, restrict access to authorised staff, and retain records according to the hospital’s agreement and applicable law.
Patient records
Patient records belong to the hospital. The platform provides the tools to access, correct and export them. Hospitals are responsible for obtaining patient consent and for their own clinical retention policies.
Staff accounts
Each staff member should have an individual account. Shared logins make the audit trail unreliable and are not recommended.
Reporting a vulnerability
If you believe you have found a security issue, contact us privately before disclosing it publicly. We will acknowledge the report and keep you updated.
Next step
Need a security review for procurement?
We can provide a questionnaire response, architecture overview and data-processing discussion.