Security · for IT and vendor-risk review
Security & trust
How Medical Supply Check protects hospital operational data today, and what remains in progress before formal enterprise assessments.
Role-based access
Every signed-in user belongs to exactly one organization and holds a role — administrator, supply chain, clinical, or executive. Roles are stored in a protected table and checked server-side on every request; the app never derives privileges from user-editable profile fields or browser storage. Administrative actions such as billing, role changes, API keys and inventory confirmation are restricted to authorized roles.
Tenant isolation
All operational records — inventory, procedures, issues, requests, vendors and reports — carry an organization identifier enforced by database row-level security policies. One hospital's data is not readable or writable by another organization's members. The public REST API authenticates each request with an organization-scoped, hashed API key and filters every query to that organization.
Audit logging
Changes to supplies, inventory, procedures, integrations and API keys are recorded in an append-only audit log capturing the actor, action, and before/after values. Issue workflows maintain their own activity timeline covering assignment, status changes, escalation and resolution confirmation. Inventory confirmation is separately attributed to a named user with a source and expiry.
Backups
The hosted database is backed up automatically once per day, with roughly 14 days of daily snapshots retained. Restoration targets the nearest earlier daily snapshot — point-in-time recovery to an arbitrary moment is not available. File storage is not covered by database backups. Medical Supply Check does not yet publish a tested disaster-recovery runbook; that remains on the enterprise readiness roadmap.
Incident response
Security concerns can be reported through the contact page. A formal incident-response plan with defined severity levels, notification timelines and post-incident review has not yet been published and must be completed before enterprise commitments are made.
Data retention
Operational records are retained while an organization's account is active. A verified retention and deletion schedule has not been finalized; the current draft is described in the privacy notice. Organizations can export their data as CSV from the Reports and management pages at any time.
Vendor-risk review
Medical Supply Check is designed for a limited-scope pilot that does not require access to patient data or enterprise system integration. For IT and vendor-risk teams evaluating a pilot, we can walk through this architecture live — request a session through the demo form. Formal security questionnaires are answered on request during evaluation.