Legal / Company

Security Notice

Summary of security-oriented design principles for product review.

Local / NAS operation

Patient photos and consent records are designed to remain inside the clinic PC, internal server, or NAS environment rather than a public cloud workflow.

Access control

Role-based access, admin controls, and audit-oriented records help clinics review important actions and sensitive workflow access.

No sensitive web submissions

This website should not receive patient data, real patient photos, private keys, secrets, or production credentials.

Certification caution

Security and certification-related claims should be reviewed and confirmed separately before any official public commercial launch.

What this security notice means in practice

This page summarizes product-design principles for early clinic review. It does not claim official certification. Clinics should use it to understand how the app is intended to keep patient photo workflows inside a local or NAS-controlled environment.

Storage boundary

Patient photos and consent records should remain in the clinic-controlled PC, server, or NAS environment. Website inquiries must not contain patient data.

Access and roles

Administrative functions, audit review, user management, export controls, and settings should be limited to authorized clinic users.

Audit-oriented operation

Viewing, exporting, login, and administrator events can be reviewed as part of clinic operation. Audit records are intended to support internal accountability.

Public launch caution

Certification, compliance, uptime, support, and legal statements should be finalized only after formal review and business approval.