(opens in a new tab)Amazon Web Services
Cloud infrastructure designed for high availability and scale. Confirm hosting locations for your market.
Trust & security
Confidence in the care.
Trust in the record.
Security, privacy and clinical-record safeguards for cosmetic, aesthetic and laser clinics.
Security & privacy
Protecting your clinic’s information.
Encryption, access controls and regular security testing help protect your clinic’s data and patient records.
Know where your data is hosted
Hosting and processing locations can depend on your market and the services your clinic uses. Ask us to walk through the relevant arrangements.
(opens in a new tab)
(opens in a new tab)Cloudflare
Web application firewall (WAF) protection to help filter malicious web traffic.
Encrypted data
Your clinic’s data is encrypted at rest and in transit, protecting it while stored and as it moves between systems.
Access controls you manage
Set user and location permissions around each team member’s work. Multi-factor authentication adds another layer of protection. Trusted-device and clinic-IP controls depend on enabled access features and your clinic’s configuration.
Security audits and breach response
Security audits help us review how information is protected. We assess suspected data breaches and provide notifications where required.
Annual penetration testing
We carry out penetration testing every year to identify security weaknesses. Ask our team about the testing scope and available evidence.
Clinical notes
Clinical notes that lock automatically.
Create clinical notes with a defined editing window. The author can edit a note on the day it is created. At midnight in the clinic’s local time, the note becomes read-only.
This helps your clinic maintain the integrity of its clinical records. The original remains in place, with later corrections or additions recorded separately as traceable amendments.
Explore clinical notes and markings
Responsible AI
Helpful assistance.
Human accountability.
AI can help with documentation. Your practitioner reviews the content and remains responsible for the clinical decisions.
Understand AI data handling
Review the processing, retention and model-training terms for the AI services your clinic uses. Our team can help you confirm the relevant providers and settings.
Professional review
AI-generated clinical content requires review and validation by a healthcare professional.
Clinical decisions stay with you
Practitioners review AI-generated clinical content and retain responsibility for diagnosis, prescribing and care.
Policies & evidence
Go straight
to the source.
A clear starting point for clinic owners, clinical leads and the people reviewing your software.
Detailed trust centre
Detailed security and infrastructure information, available to approved users.
Visit trust centreOpens in a new tabPrivacy Policy
Information handling, access, retention and breach response.
Read policyReport a security issue
Report a suspected vulnerability to our security team.
security@dappleos.comFAQs
Can we review DappleOS against our clinic’s local requirements?
Yes. Bring your jurisdiction, clinical services, data-residency requirements and security questionnaire to a demo. DappleOS can explain its published controls and documentation workflows. Your clinic and practitioners remain responsible for the requirements that apply in your market.
How can we confirm hosting and data-processing locations?
Confirm the hosting and processing locations relevant to your market with DappleOS. Requirements can depend on the services and connections your clinic uses. The Privacy Policy describes third-party processing, including overseas providers; do not assume all processing occurs in one country.
Which security measures does DappleOS publish?
The Privacy Policy describes encryption of health information at rest and in transit, authorised access controls, multi-factor authentication, security audits and breach assessment and notification where required. Use the security portal and a demo to review the scope and evidence for your specific requirements.
Can we control access from clinic devices?
Where enabled, trusted-device controls let your clinic apply access rules to recognised devices. Configured clinic IP addresses can also support device trust. These controls depend on your access features and settings, so review user permissions, device approval, blocked devices and session behaviour with our team before relying on a particular setup.
How can we confirm certification requirements?
This page does not claim independent certification. If your procurement process requires certification, a particular audit report or another formal assurance, confirm that requirement with DappleOS before proceeding.
Does using DappleOS satisfy my professional indemnity policy?
No software can determine your insurance cover. DappleOS’s documentation workflows can help you retain a clear treatment record and review its history. Confirm your insured activities, record-keeping obligations, notification requirements and any other conditions with your professional indemnity insurer. This page does not imply endorsement by an insurer.
How can we review AI processing, retention and model training?
Confirm the model-training, processing and retention terms for each AI service your clinic intends to use, including its providers and settings. Ask the DappleOS team for the relevant documentation before sending patient information. Practitioners review AI-generated clinical content and retain responsibility for clinical decisions.
Can a completed clinical note be changed without losing its history?
The author can edit a clinical note on the day it is created. At midnight in the clinic’s local time, it becomes read-only. The original record is preserved, with subsequent corrections or additions recorded separately as traceable amendments. The practitioner remains responsible for making an accurate record and explaining a later change.
Can we review backups, exports, retention and incident response?
Yes. Bring your required retention periods, export requirements, recovery expectations and incident-response questions to the DappleOS team. Review the Privacy Policy and current security portal first, then confirm the relevant arrangements and supporting documentation. Do not assume a particular recovery time, export format or deletion timetable without that review.
Ask DappleOS
Ask DappleOS about your clinic’s documentation and security questions, or book a demo to review specific requirements.
Amazon Web Services, AWS and the AWS logo are trademarks of Amazon.com, Inc. or its affiliates. Cloudflare and its logo are trademarks of Cloudflare, Inc.