The clinic's data stays the clinic's.
Every screen and server call checks the person's role at the record's clinic.

A role at each clinic.
Access follows the clinic a record belongs to, not a job title.
- Roles defined per organisation
- One role per clinic for each member
- Permissions checked on the server and by row-level security
- Organisation-wide history behind its own permission
- Only the owner manages staff and role permissions

Every change, written down.
The owner reads who did what. The trail leaves clinical notes out.
- Audit trail without clinical content
- CSV exports recorded in the audit
- Sign-in audit for platform operators
- Cross-tenant audit for platform operators

Who gets in, and what can leave.
Hosphi runs on Cloudflare, with the clinic's data in Supabase.
- Invitation-only accounts
- Email and password sign-in
- HttpOnly cookie sessions
- 60-minute idle timeout
- Sign out everywhere
- Patient, appointment and consultation CSV export
- Patient CSV import with duplicate review
- No billing data, because there is no billing
What we do not claim.
Hosphi is pre-certification. We do not claim SOC 2, ISO 27001 or ABDM certification, or data residency. Ask us the hard questions and we will answer them in writing.
Write to security@hosphi.com. Last reviewed .
Bring your clinic day.
Twenty minutes on sample data, with the person who builds Hosphi. You leave with a clear answer on fit.
Book a walkthrough
Hosphi is taking its first pilot clinics. Accounts are by invitation.