This is an overview, not legal advice.
Hosted in Australia
Every Australian clinic's data is hosted in Australia and stays in Australia. Clinics in other countries are on their own servers in their own region; the two never share a database.
Encrypted everywhere
Every connection, from the browser to the server, the patient portal and the booking page, is encrypted, with certificates renewed automatically.
Strong sign-in
Staff sign in with a passkey, their face or fingerprint, or a password plus a two-factor code. Screens lock themselves after a period left alone, so a shared reception computer never stays open on a patient. Owners choose how long.
The right people see the right things
Six roles, more than fifty permissions, every one checked on the server, not just hidden on screen. Clinical notes can never be opened by a reception, accounts or marketing login, and that switch is locked so no setting can turn it on. Give each person the least they need. See staff roles and timesheets.
A trail of who did what
Every record keeps a trail. The activity log shows bookings made, moved and cancelled, invoices issued and every change to the practice, with a name against each. The Security page shows who is signed in on which device, and lets you sign a device out.
Nothing clinical is lost
Notes save as you type and lock once signed; corrections are amendments; nothing clinical is ever hard-deleted. See treatment notes.
A plan if something goes wrong
A written breach-response procedure sets out the first hour, the first day and the notification steps under the Notifiable Data Breaches scheme, decided in advance.
Your data is yours
Export patients, appointments, notes and invoices whenever you like, yourself. Every export is recorded in the audit log. See switching physio software.
What your practice should do
- Give every person their own login. Never share the reception password.
- Use passkeys or two-factor for everyone, owners first.
- Review access each quarter: archive people who have left, and check nobody has more than their job needs.
- Tell patients how you handle their information, in your intake and consent form.
- Keep clinical details out of personal email and chat apps.
Frequently asked questions
Where is Clinidiary's Australian data stored?
In Australia. Australian clinics' data stays in Australia.
Can reception read clinical notes?
No. Reception logins can never open clinical notes.
Can we export all our data?
Yes. Export patients, appointments, notes and invoices yourself, whenever you like.