Your clinical records remain under your control
Clinosys separates local clinical storage from optional, minimized connected services.
Your clinical records remain under your control
Clinosys separates local clinical storage from optional, minimized connected services.
AES-256-GCM encryption
Sensitive patient identity and clinical fields, notes and document contents are protected with application-level AES-256-GCM encryption. Working keys remain local.
Morning-passphrase model
A clinic passphrase entered at startup derives via Argon2id the KEK that unlocks the DEK, NEK and DOK keys. Held in memory only.
SHA-256 chained audit
Security-sensitive events covered by the current audit layer are cryptographically linked with SHA-256, allowing verification to detect breaks in the recorded sequence.
Local-first, always
Sensitive clinical fields and documents are encrypted by the application before local storage. Full-file database encryption is not yet available. Essential clinical workflows work offline; connected services use a limited connection.
Role-based access control
7 predefined roles (Owner, Director, Doctor, Head Nurse, Nurse, Secretary, Assistant) with a granular permission matrix.
Aligned with Loi 09-08
Architecture designed to respect Morocco's personal data protection law — consent, minimization, right of access.
How your keys live throughout the day
Passphrase entered once
The owner enters the clinic passphrase at startup. Argon2id derives the KEK, which unlocks DEK (patients) / NEK (notes) / DOK (documents).
Staff log in normally
Each user signs in with their password. The app encrypts and decrypts protected fields in memory as needed, then locks after inactivity.
Keys wiped on shutdown
When the app closes, the DEK/NEK/DOK keys are wiped from memory (zeroize). Sensitive clinical fields and documents remain application-level encrypted; recoverable key slots are not yet available.

I've waited years for a practice app that starts in Arabic, prints a proper Moroccan prescription, and never asks me to trust a foreign cloud. Clinosys is that app.
Ready to try Clinosys?
Download the application now. Your automatic 14-day trial starts on first launch.
Limited seats in the first cohort•14-day evaluation · no credit card · cancel anytime

