Security

Your clinical records remain under your control

Clinosys separates local clinical storage from optional, minimized connected services.

AES-256Loi 09-08Cohort 01FR · AR · EN
macOSWindowsmacOS & Windows downloads
Security

Your clinical records remain under your control

Clinosys separates local clinical storage from optional, minimized connected services.

AES-256-GCM encryption

Sensitive patient identity and clinical fields, notes and document contents are protected with application-level AES-256-GCM encryption. Working keys remain local.

Morning-passphrase model

A clinic passphrase entered at startup derives via Argon2id the KEK that unlocks the DEK, NEK and DOK keys. Held in memory only.

SHA-256 chained audit

Security-sensitive events covered by the current audit layer are cryptographically linked with SHA-256, allowing verification to detect breaks in the recorded sequence.

Local-first, always

Sensitive clinical fields and documents are encrypted by the application before local storage. Full-file database encryption is not yet available. Essential clinical workflows work offline; connected services use a limited connection.

Role-based access control

7 predefined roles (Owner, Director, Doctor, Head Nurse, Nurse, Secretary, Assistant) with a granular permission matrix.

Aligned with Loi 09-08

Architecture designed to respect Morocco's personal data protection law — consent, minimization, right of access.

How your keys live throughout the day

Morning

Passphrase entered once

The owner enters the clinic passphrase at startup. Argon2id derives the KEK, which unlocks DEK (patients) / NEK (notes) / DOK (documents).

Day

Staff log in normally

Each user signs in with their password. The app encrypts and decrypts protected fields in memory as needed, then locks after inactivity.

Evening

Keys wiped on shutdown

When the app closes, the DEK/NEK/DOK keys are wiped from memory (zeroize). Sensitive clinical fields and documents remain application-level encrypted; recoverable key slots are not yet available.

Dr. Fahd Idrissi-Aatouf
Early voices
I've waited years for a practice app that starts in Arabic, prints a proper Moroccan prescription, and never asks me to trust a foreign cloud. Clinosys is that app.
Dr. Fahd Idrissi-AatoufDental surgeon · Morocco
@dr.fahdidrissiaatouf
Desktop demo

Ready to try Clinosys?

Download the application now. Your automatic 14-day trial starts on first launch.

Limited seats in the first cohort14-day evaluation · no credit card · cancel anytime