Tenant isolation
Organization data is scoped by tenant. Cross-tenant IDOR paths are denied in services and APIs.
Trust
Security that matches multi-tenant healthcare software
Isolation, least privilege, and explicit failure modes when external systems are not configured.
Controls
Security pillars
Designed for multi-tenant healthcare ops — deny by default across tenants, modules, and misconfigured providers.
6 pillars · fail closed
01 02 RBAC & memberships
Staff access flows through memberships and system roles (doctor, pharmacist, pathologist, admin, and more).
03 Module entitlements
Unlicensed modules return entitlement denials — including mid-session disable for expired or turned-off modules.
04 Auditability
Sensitive clinical and billing actions are designed to emit audit events for later review.
05 Encryption & secrets
Application encryption keys and provider credentials stay server-side. Public env vars never hold secrets.
06 Honest provider blocks
When Cloudinary, Razorpay, or email providers are missing, APIs fail closed with explicit PROVIDER_BLOCKED / configuration errors — not silent success.
Vendor review or security questionnaire?
Security practices evolve with your deployment. Email support@utkaltechnologies.com for questionnaires and vendor review.
A product of Utkal Technologies