Security Policy

Last Updated: 01-Nov-2024

1. Overview

At Experts InfoTech (Pvt) Ltd, the security of the xMed EMR platform and the protection of your data are our highest priorities. This document outlines the security measures we implement to safeguard your information.

2. Data Encryption

We utilize industry-standard encryption protocols to protect data in transit and at rest.

• Transit: All data transmitted between your device and our servers is encrypted using SSL/TLS (HTTPS).
• At Rest: Patient data stored in our databases is encrypted using strong AES-256 encryption algorithms.

3. Access Control

We enforce strict access controls to ensure that only authorized personnel can access your data.

• Authentication: Users must log in with unique credentials. We support strong password policies and Multi-Factor Authentication (MFA).
• Role-Based Access: Permissions are granted based on user roles, ensuring staff members only access information necessary for their job functions.

4. Network and Application Security

We employ advanced security measures to protect our infrastructure from external threats.

• Firewalls: Our servers are protected by enterprise-grade firewalls to block unauthorized traffic.
• Monitoring: We maintain continuous monitoring systems to detect and respond to suspicious activity in real-time.
• Regular Audits: We conduct periodic security audits and vulnerability assessments to identify and fix potential risks.

5. Data Backup and Recovery

To prevent data loss, we maintain automated and redundant backups of all customer data.

• Backups are performed daily and stored in secure, geographically separated locations.
• We regularly test our disaster recovery procedures to ensure data can be restored quickly in the event of an incident.

6. User Responsibilities

While we take extensive measures to secure the platform, users also play a critical role in maintaining security.

• Keep your password confidential and do not share it with anyone.
• Ensure your device is protected with up-to-date antivirus software.
• Log out of the xMed EMR system when not in use, especially on shared devices.
• Report any suspicious activity or potential security breaches to our support team immediately.

7. Incident Response

In the event of a confirmed security breach involving personal or medical data, we will follow applicable legal requirements to notify affected users and relevant authorities within the mandated timeframes.

8. Compliance

Our security practices are designed to align with industry standards and regulations, including HIPAA, GDPR, and other local data protection laws applicable to the healthcare sector.

9. Contact Us

If you have any questions regarding the security of the xMed EMR platform, please contact our security team:

• Company: Experts InfoTech (Pvt) Ltd
• Email: info@xmed.pk
• Website: https://xmed.pk
• Address: P-19, Block-E, Millat Town, Faisalabad.