Security and trust
What protects your business on our systems today, in plain words. Nothing here is a claim we cannot back up.
Where your records live
Rosvin Health and Rosvin Works keep patient and business records on a server in Kenya. Our shared sign-in and billing service runs in a secure data centre in London and holds account and subscription details, not patient or business records.
Who can see what
Every person signs in with their own account. Roles decide what each person can see and do, staff can use two-step sign-in, and the audit trail names the person behind every change.
How our servers are protected
Traffic passes through Cloudflare over encrypted connections. Our servers sit behind firewalls and can be reached for administration only from named addresses. Repeated bad sign-in attempts and known attacking networks are blocked automatically.
Backups and recovery
Databases are backed up every night, and Health's backups are encrypted. A continuous recovery copy lets us restore to within about a minute of a mistake. We are adding a second copy in another location.
We are watching
Rosvin Health, Rosvin Works and our shared platform report their health to us every minute. If one stops reporting or a backup is missed, we are alerted by email. Our live status page runs checks on every system.
What we do not claim
We do not hold ISO 27001 or SOC 2 certification yet. We would rather tell you that than imply it. If your organization needs a security questionnaire answered, send it to us.