Protection by design

Data Security

How RDigital helps safeguard clinic information through practical technical, organizational, and operational controls.

Last updated: September 2, 2026

1. Our security approach

RDigital applies layered safeguards intended to protect the confidentiality, integrity, and availability of information. Controls are reviewed as the platform, risks, and applicable requirements evolve. No online service can guarantee absolute security, but we work to reduce risk using proportionate safeguards and disciplined operating practices.

2. Identity and access control

  • Role-based permissions limit users to the information and functions needed for their work.
  • Individual accounts support accountability and reduce unsafe credential sharing.
  • Authentication and session controls help prevent unauthorized access.
  • Administrative access is limited to authorized personnel with an operational need.

3. Protecting data

We use reasonable measures designed to protect information during transmission and storage. These may include secure network protocols, protected hosting environments, database access restrictions, backup procedures, and safeguards against common web threats.

Data is limited to what is needed for clinic workflows and service administration. Retention requirements depend on clinic policies, contracts, and applicable healthcare and privacy obligations.

4. Secure operations

  • Activity may be logged for troubleshooting, auditing, and threat detection.
  • Updates and security fixes are assessed and applied according to risk.
  • Backup and recovery procedures support service resilience.
  • Suspected security events are investigated through incident-response procedures.

5. Privacy and compliance

Security supports privacy compliance. We design safeguards with the Philippine Data Privacy Act of 2012 and relevant contractual responsibilities in mind. Each clinic remains responsible for lawful processing, patient notices, user practices, retention decisions, and its regulatory obligations.

For website data practices, see our Privacy Policy.

6. Shared responsibility

Customers strengthen security by using unique passwords, restricting account access, reviewing staff permissions, securing devices and local networks, training users, and reporting suspicious activity promptly. Sensitive patient information should not be submitted through the public enquiry form.