Security & Compliance

Patient data is a trust we hold

And we treat it that way: AES-256 encryption, servers in Indonesia, and UU PDP No. 27/2022 compliance. You can verify all of it on this page.

UU PDP Compliance (Law No. 27/2022)

Explicit patient consent, restricted access to medical data, and structured erasure rights — designed into the architecture, not patched on later.

Records, vitals, and e-prescriptions encrypted with AES-256 at rest, protected by TLS 1.3 in transit to the SATUSEHAT network.

All facility data lives in Tier III certified domestic data centers — meeting local medical record storage mandates.

An ISMS built on ISO/IEC 27001 controls: periodic external audits, routine penetration testing (VAPT), and MFA for all operator access.

Fully encrypted data residency

Routine security VAPT audits

Structured patient consent logs

Role-based access control (RBAC)

Security Questions

Bring them to the demo — encryption architecture, data flows, and compliance can be examined together with our team.