Security

• Every record is protected by row-level access rules enforced in the database itself, not only in the application.
• You can read only your own cases. A clinician can read a case only when it has been assigned to them for review.
• Administrative roles are stored separately from user profiles so account data cannot be edited to gain privileges.

• Files are stored in a private bucket that is not publicly readable.
• Access happens through short-lived signed links generated for you at the moment you view a file.
• Deleting a case deletes its files.

Data is encrypted in transit using TLS and encrypted at rest by our infrastructure provider.

Clinical review actions are written to an append-only audit trail, so any change made to your case during review can be traced.

If you believe you have found a security issue, please email security@infrmdmsk.com with enough detail to reproduce it. Please do not access or modify data belonging to other people. We will acknowledge your report and keep you updated while we investigate.

You can export or permanently delete your data at any time from your profile page. See the privacy policy for retention detail.