Security
Enterprise-grade security features to protect your practice and client data with encryption, authentication, and comprehensive audit logging.
Two-Factor Authentication#
Add an extra layer of security to your account with TOTP-based two-factor authentication.
Authenticator App
Use Google Authenticator, Authy, or any TOTP app
Backup Codes
10 one-time backup codes for account recovery
Device Trust
Remember trusted devices for 30 days
Session Security
Automatic logout on suspicious activity
Setting Up 2FA#
Go to Settings > Security > Two-Factor Authentication
Click "Enable 2FA" and enter your password
Scan the QR code with your authenticator app
Enter the 6-digit code from your app to verify
Save your backup codes in a secure location
Store your backup codes securely. Each code can only be used once. If you lose access to your authenticator app and backup codes, you'll need to contact support for account recovery.
Audit Logs#
Comprehensive activity logging for compliance, security, and troubleshooting.
Tracked Events#
CRUD Operations
- Create, Read, Update, Delete
- Before/After values
- Changed fields tracking
Authentication
- Login/Logout events
- Failed login attempts
- Password changes
System Events
- Configuration changes
- Backup/Restore operations
- Import/Export actions
Metadata
- IP address
- User agent
- Request path
Audit logs are retained for 2 years to meet compliance requirements. Logs can be exported to CSV for archival purposes.
Data Encryption#
Enterprise-grade encryption to protect sensitive client and financial data.
At Rest Encryption
- AES-256-GCM encryption
- Sensitive fields encrypted
- PAN, GSTIN, bank details
- Key rotation support
In Transit Encryption
- TLS 1.3 for all connections
- HTTPS enforced
- Secure WebSocket connections
- Certificate pinning