Access follows responsibility
Doctors, nurses, cashiers, pharmacy staff, service teams, and administrators receive access that matches the work assigned to them.
Protect patient data while keeping your facility in control.
HealthLedger combines encrypted data, responsibility-based access, separated support operations, complete audit visibility, managed backup and recovery, and hospital-directed data policies.
- Encrypted at rest
- Stored patient and facility data is encrypted.
- Encrypted in transit
- Data is encrypted while it is transmitted.
- Separated from backend support
- Patient and facility data is not visible to backend support staff.
- Complete audit visibility
- Authorized facility administrators can view complete audit logs.
The data-centre photograph is illustrative and does not depict HealthLedger-owned infrastructure. HealthLedger supports internet-hosted and local-server deployment models. See Image Credits.
Access and accountability
Give people the access they need for the work they own.
Security follows the facility's departments and responsibilities. Clinical, financial, service, and administrative access do not need to be the same.
Administration stays separated
Authorized managers retain responsibility for users, roles, departments, imports, printing, and other administrative functions.
Facility activity remains reviewable
Authorized facility administrators can use complete audit logs to review important operational and administrative activity.
Controls follow the rollout
Department access, administrative responsibility, data handling, and accountability are configured as part of implementation.
Confidentiality and transparency
Support operations stay separate from patient and facility data.
Patient and facility data is not visible to backend support staff. Authorized facility administrators, however, retain complete audit-log visibility so important activity can be reviewed inside the hospital's own accountability structure.
Data lifecycle
Managed continuity with hospital-directed policy.
Backup and recovery
HealthLedger manages backup and recovery without adding routine backup work to hospital teams.
Export and retention
Authorized export and retention are configured around hospital policy and applicable legal obligations.
Deployment and continuity
Select the deployment model that matches facility operations.
Deployment planning covers availability needs, facility infrastructure, access responsibilities, and data policy without treating internet continuity as protection from every possible local outage.
Internet-hosted
Give authorized teams access through an internet connection without managing a server at the facility.
Local server
Keep core facility work available when internet connectivity is interrupted. Local power, hardware, and network readiness remain part of deployment planning.
Regulatory alignment
Support the facility's data-protection and governance program.
HealthLedger supports controls and data policies aligned with the Nigeria Data Protection Act (NDPA) and, where applicable, GDPR and HIPAA requirements. These controls are part of a facility's broader policies, processes, responsibilities, and legal obligations; they are not a blanket certification of every customer or deployment.
Security review questions
The controls procurement and facility teams ask about first.
Is HealthLedger data encrypted?
Yes. Patient and facility data is encrypted at rest and in transit. The security review covers the implementation details relevant to the facility's deployment.
Can backend support staff view patient or facility data?
No. Patient and facility data is not visible to backend support staff. Hospital users and administrators receive access according to their authorized roles and responsibilities.
Can hospital administrators review activity?
Yes. Authorized facility administrators can view complete audit logs. The facility defines who holds that administrative responsibility during implementation.
Who manages backup and recovery?
HealthLedger manages backup and recovery as part of the service. The implementation discussion confirms the facility's policies, operating responsibilities, and agreed recovery scope.
Can the hospital export data and set retention policy?
Yes. Authorized export and retention are configured around hospital policy and applicable legal obligations. Exact scope is agreed with the facility.
Does HealthLedger support NDPA, GDPR, and HIPAA requirements?
HealthLedger supports controls and data policies aligned with the Nigeria Data Protection Act and, where applicable, GDPR and HIPAA requirements. Software controls support a facility's wider governance program; this is not a claim that every facility or deployment is automatically certified or compliant.
Review security and deployment in your facility context.
Discuss roles, administrative responsibility, audit visibility, data policy, backup and recovery, and internet-hosted or local-server deployment.