Security & Privacy

Blue Practice was built for Newfoundland & Labrador clinics, where patient privacy isn't a feature — it's the foundation. Here's how your patients' information is protected.

Your Data Stays at Your Clinic

Blue Practice is installed on your clinic's own computer system. Patient records are not stored in a foreign cloud or a third-party data centre — they live on hardware you control, inside your clinic. You can work securely from outside the clinic on a tablet, phone or computer, but the data itself never leaves your system.

Private AI — Not a Public Chatbot

Our AI dictation, SOAP notes and letter drafting run on private, physician-controlled infrastructure. Nothing is ever sent to ChatGPT, Google, or any public AI service. Recordings and transcripts are stored securely on clinic infrastructure, and patients are asked to consent before any visit is recorded.

Two-Factor Authentication

Logins support two-factor authentication using an authenticator app, so a stolen password alone can't open a chart.

A Complete Audit Trail

Every chart view and every change is logged. Administrators can see a full timeline for any patient record — who viewed it, who changed it, and when — and review user activity across the clinic, including access from unusual locations.

Role-Based Permissions

Every staff member has an individually configurable set of permissions. Front desk, billing staff and physicians each see exactly what their role requires — nothing more.

Encrypted Connections and Hardened Servers

All connections use modern TLS encryption. Servers are hardened with key-only administrative access and automatic blocking of suspicious access attempts, and receive regular security updates. We also conduct periodic security audits of the application itself.

Automated Backups

Clinic databases and documents are backed up automatically every day to secure backup infrastructure, so a hardware failure never means lost records.

Built for Your Obligations

Blue Practice is designed to support your privacy obligations as a health information custodian under Newfoundland & Labrador's Personal Health Information Act (PHIA) — access controls, audit trails, and data that stays under your custody.

Have a specific security question? Ask us directly — we're happy to walk through any of this in detail.